docs: the hosting guide still says user-marked untrusted files are not a taint source
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Newbie friendliness
- 78/100
- Issue type
- Documentation
- Clarity
- Clearly specified
- Activity status
- Active
- Tech stack
- markdown, typescript
- Domain
- documentation
Research direction
The stale sentence is at the end of the taint passage in docs/hosting/agent-workers.md (lines 1623-1625). Read the G6 section of docs/decisions/governed-writable-workers.md (the untrusted-input anchor) to confirm what marked files do, then rewrite the sentence to match and link to that anchor. Done when the guide no longer calls marked files a non-source and tests/decision-citations.test.ts passes.
Written by the indexing model from the issue text.
Description
Context
Found while reviewing #3478 (#3429). The hosting guide's taint passage ends with "Files the user marks untrusted are not a source yet" (docs/hosting/agent-workers.md:1623-1625, at main d142e997b). That is out of date: marked files have tainted the session since the untrusted-marks work for #2673 (PR #3287), and #3478's decision-record update lists them as a taint source.
Scope
Rewrite that sentence to describe what marked files actually do, and link to the G6 section of the decision record (docs/decisions/governed-writable-workers.md#untrusted-input-g6) for the rules. Docs only.
Acceptance criteria
docs/hosting/agent-workers.mdno longer says marked files are not a taint source, and it states the current behaviour consistently with the G6 section.tests/decision-citations.test.tspasses.
- Dominant language
- TypeScript
- Stars
- 3
- Forks
- 0
- Avg merge
- 5h 13m
- Merged PRs (30d)
- 953
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from schlessera/brain-kit
-
agent-ready area: backends area: ui-sdk priority: p1 type: fix
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
schlessera/brain-kit#3519 · 1 comment ·
Maintainers usually reply within 1 day
-
agent-ready area: ci priority: p2 type: fix
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
schlessera/brain-kit#3318 ·
Maintainers usually reply within 1 day
-
agent-ready area: ui-server priority: p2 type: fix
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
schlessera/brain-kit#3259 ·
Maintainers usually reply within 1 day
-
agent-ready area: ui-kit priority: p2 type: docs
Difficulty 1/5 Under an hour Newbie friendliness 90/100
schlessera/brain-kit#3188 ·
Maintainers usually reply within 1 day
-
agent-ready area: ui-server type: test
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
schlessera/brain-kit#3009 · 1 comment ·
Maintainers usually reply within 1 day
All issues in schlessera/brain-kit
Similar issues
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Yeraze/meshmonitor#6239 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
better-auth/better-auth#12292 · 1 reaction ·
Maintainers usually reply within 1 day
-
The sample email preview's ResizeObserver is never disconnected and keeps raising errors after leaving SettingsPossibly taken A pull request linked to this issue is open or already merged. Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
Maintainers usually reply within 1 day
-
area:ui bug effort:S priority:P2
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 1 day
-
Typo in WSL project description on Projects pagePossibly taken @akhil9tiet claimed this today. Open
Difficulty 1/5 Under an hour Newbie friendliness 75/100
microsoft/opensource.microsoft.com#1066 · 1 comment ·