Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

assetUrlProblem: data:image check uses the un-normalised URL, so ' data:image/png...' is rejected

Open Beginner friendly
#104 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
88/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active
Tech stack
react, typescript
Domain
security, testing

Research direction

Start in packages/editor-2.5d-react/src/objects/validate.ts and read assetUrlProblem alongside normalizeUrlForScheme. Add a unit case for a data:image/ URL with leading whitespace or C0 characters, then run the relevant unit test. Done when the normalized URL is used for the data-image check and the new case passes.

Written by the indexing model from the issue text.

Description

area:holodeck review-finding

From the #93 re-review. packages/editor-2.5d-react/src/objects/validate.ts assetUrlProblem: the scheme is read from normalizeUrlForScheme(v) but the data:image/ test runs on raw v, so a data image URL with leading whitespace/C0 (which browsers accept) is refused. Fail-safe (false negative, not a bypass). Fix: run the /^data:image\//i test on the normalised string; add a unit case.

🤖 Generated with Claude Code

Dominant language
TypeScript
Stars
0
Forks
0
Avg merge
14h 55m
Merged PRs (30d)
26

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from hyperdrive-technology/holodeck

All issues in hyperdrive-technology/holodeck

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.