This repository was archived by the owner on Aug 6, 2026. It is now read-only.

fix(canvas): securely open external links - #3645

Merged

trunk-io[bot] merged 4 commits into

mainfrom

posthog-code/secure-canvas-external-links

Jul 22, 2026

Commits on Jul 21, 2026

fix(canvas): broker external links through host
k11kirky
authored
d26d73f

Commits on Jul 22, 2026

fix(canvas): restrict external links to PostHog URLs and harden click broker
k11kirky
authored
c1e8a3c
fix(canvas): require canvas interaction before external opens
k11kirky
authored
39d785a
chore(canvas): trim comments to load-bearing constraints
k11kirky
authored
1e5a48b