2 commits

Author	SHA1	Message	Date
Ninym	71461fb352	test(security): add failing test for MEDIUM-2 menubar injection ... Three cases (pipe-in-model, ANSI-in-model, pipe-in-category) reproduce the audit's SwiftBar directive-separator attack. Tests fail against current menubar.ts -- Task 13 will close with an allowlist sanitizer.	2026-04-17 08:32:20 +02:00
Ninym	e890d9bfc3	test(security): add failing test for HIGH-1 prototype pollution ... Three PoC fixtures (tool name, bash command, model name) reproduce the audit's HIGH-1 attack. Tests assert Object.prototype.calls stays undefined after parsing. They fail against current parser.ts -- Task 3 will close the pollution sink with Object.create(null).	2026-04-17 08:32:18 +02:00