← Back to events
CoolingTechRelease1.136.2

1.136.2: Merged PR 759: Fix MSRC 134488

Photo: VS Code Releases

What happened

Validate media-loading sources while sanitizing chat Markdown, before the sanitized fragment is attached to a DOM node and can initiate a request. Apply validation to source and poster attributes, reject network-backed file resources, and preserve the existing plaintext fallback and genuinely local file/data image support. Add focused sanitizer, Markdown renderer, and chat renderer regression coverage. Issue: https:…

Summary assembled by rule from the sources below

Why it's spreading

Sources

Release