You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
ImprovementsKind: in v2.1.277,
ImprovementsSection of the release
What
When a message coming through Slack looks like a slash command but didn't go through the existing bridge-slash-override handling and isn't confirmed to be from a verified human Slack user, a new check called resolveRelaySlashRefusal now runs and can block the message from being relayed.
Why
This closes a gap where an unverified Slack message could otherwise trigger a slash command, adding a safeguard against unauthorized or spoofed command execution through Slack integrations.
