Skip to content

Validate browser launch URL - #56663

Merged
tmat merged 3 commits into
dotnet:release/11.0.1xxfrom
tmat:validate-launch-url
Oct 16, 2026
Merged

tmat merged 3 commits into
dotnet:release/11.0.1xxfrom
tmat:validate-launch-url

Conversation

@tmat

@tmat tmat commented Oct 15, 2026

Copy link
Copy Markdown
Member

No description provided.

Copilot AI balanced review requested due to automatic review settings October 15, 2026 22:12
@tmat
tmat requested a review from a team as a code owner October 15, 2026 22:12
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).
2 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

@tmat tmat added Area-Watch dotnet-watch and removed Servicing-consider labels Oct 15, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The new scheme restriction needs regression coverage for absolute non-HTTP URLs.

1 open finding
What changed in this PR

Validates URLs extracted from application output before dotnet watch launches a browser.

Changes:

  • Restricts observed URLs to absolute HTTP/HTTPS URLs and excludes trailing whitespace.
  • Moves Aspire-host detection into BrowserLauncher.
  • Adds URL-matching tests for standard and Aspire output.
File Description
test/​dotnet-watch.Tests/​Browser/​WebServerProcessStateObserverTests.cs Adds URL acceptance and rejection tests.
src/​Dotnet.Watch/​Watch/​Process/​WebServerProcessStateObserver.cs Tightens URL extraction and validates schemes.
src/​Dotnet.Watch/​Watch/​Browser/​BrowserLauncher.cs Passes Aspire-host status to the observer.

🧠 Review effort: Balanced

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
@tmat
tmat enabled auto-merge (squash) October 15, 2026 22:45
@tmat
tmat merged commit 86e5b05 into dotnet:release/11.0.1xx Oct 16, 2026
22 checks passed
@tmat
tmat had a problem deploying to copilot-pat-pool October 16, 2026 17:12 — with GitHub Actions Failure
@tmat
tmat deleted the validate-launch-url branch October 16, 2026 18:06

This branch had an error being deployed

1 failed deployment
copilot-pat-pool — 029ce61e Deployed Oct 16, 2026 by tmat via pre_activation #9336
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Area-Watch dotnet-watch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants