Back to Home
burnashe icon

Terragrunt

by burnashe

Overview

A Chrome extension that prevents merging 'Work In Progress' (WIP) pull requests on GitHub by disabling the merge button based on the pull request title, assigned tags, incomplete tasks, or specific commit message prefixes.

Installation

Run Command
No command provided

Security Notes

The extension contains a Cross-Site Scripting (XSS) vulnerability. User-defined custom messages for the disabled merge button, stored in `localStorage.buttonMessage`, are directly injected into the `innerHTML` of the merge button element in `contentscript.js`. This allows for arbitrary JavaScript code execution on GitHub pages if a malicious or careless user provides a script as their custom button message.

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassLow
Stars0
Forks0
Last Update2025-12-15

Tags

GitHubChrome ExtensionDeveloper WorkflowWIPPull Request