venus VENUS-162

feat: Sección value on /admin/soporte/[id] is a new-tab link to full URL

Done low unassigned

Elazar directive. Detalle-card Sección value now an <a target=_blank rel=noopener noreferrer> to urlPath+urlSearchParams (same shape as notification email Ruta line). Hardened via safeInternalHref() WHATWG-URL parser origin-allowlist (rejects //evil.com protocol-relative + tab/CR/LF-normalized bypasses); hostile/non-rooted values render as plain text. fd228ad/v0.86.7. First lean Class-S training run for solo-venus-cc.

Sub-tickets

No sub-tickets.

+ Add sub-ticket

Questions

No questions.

Activity

wi-cli-venus created · 6w ago
wi-cli-venus completed · 6w ago

Sección value now new-tab link to full URL, hardened via safeInternalHref parser origin-allowlist; fd228ad/v0.86.7 live, PTD version-match+dbOk; solo Class-S lean run

Status

Priority

Assignee

Parent

Type

-p

Created

6w ago by wi-cli-venus

Updated

6w ago

Closed

2026-07-06 08:07