Dan Moseley a0f77070f5 Reduce false positives in reference scanner (#360) ...

- Skip HTTP-not-HTTPS inside fenced code blocks (code examples use
  http:// listen addresses). EXTERNAL-DOMAIN checks still run inside
  fences since agents see raw text, not rendered markdown.
- CommonMark-compliant fence tracking (type, length, closing-only
  whitespace, max 3-space indent).
- Skip placeholder/template URLs by checking the host portion only
  (not the full URL) to prevent bypass via path components.
- Case-insensitive placeholder matching.
- Generalize path-scoped domain matching to all domains (not just
  github.com), enabling entries like npmjs.com/package/@org.
- Treat wildcard listen addresses (http://+:port, http://*:port) as
  local URLs.
- Add xunit.net to known-domains.txt.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-03-14 07:47:37 +01:00

..

dashboard

[Infra] Add validation with whole plugin loaded (#316)

2026-03-12 22:44:36 +00:00

reference-scanner

Reduce false positives in reference scanner (#360)

2026-03-14 07:47:37 +01:00

skill-validator

Add structural external dependency checker (#355)

2026-03-13 10:25:13 -06:00