Merge pull request #561 from Kanchan-Microsoft/main

chore: Fixed security vulnerability

Author: Roopan-Microsoft

.github/workflows/deploy.yml

@@ -2,7 +2,7 @@ name: Validate Deployment v3
 
 on:
   workflow_run:
-    workflows: ["Build Docker and Optional Push"]
+    workflows: ["Build Docker and Optional Push v3"]
     types:
       - completed
     branches:

src/frontend/src/services/PlanDataService.tsx

@@ -383,7 +383,7 @@ export class PlanDataService {
 
       const facts =
         body
-          .match(/facts="([^"]*(?:\\.[^"]*)*)"/)?.[1]
+          .match(/facts="((?:[^"\\]|\\.)*)"/)?.[1]
           ?.replace(/\\n/g, '\n')
           .replace(/\\"/g, '"') || '';
 
@@ -792,7 +792,7 @@ export class PlanDataService {
       if (!source) return null;
 
       // question=( "...") OR ('...')
-      const questionRegex = /question=(?:"((?:\\.|[^"])*)"|'((?:\\.|[^'])*)')/;
+      const questionRegex = /question=(?:"((?:[^"\\]|\\.)*)"|'((?:[^'\\]|\\.)*)')/;
       const qMatch = source.match(questionRegex);
       if (!qMatch) return null;
 

src/mcp_server/pyproject.toml

@@ -21,7 +21,7 @@ dependencies = [
   "azure-identity==1.19.0",
   "pydantic==2.11.7",
   "pydantic-settings==2.6.1",
-  "python-multipart==0.0.17",
+  "python-multipart==0.0.18",
   "httpx==0.28.1",
 ]