qwen-code/packages/core
wenshao 3e105452a2 fix: use temp file + quoted heredoc for shell-safe comment body
Review content may contain double quotes, $VAR, backticks, etc. that
break double-quoted shell arguments or trigger run_shell_command security
rejection. Replace direct string interpolation with a two-step approach:

1. Write body to temp file via quoted heredoc (<<'BODYEOF') which
   prevents ALL shell expansion
2. Reference file with -F body=@/tmp/pr-comment.txt in gh api calls
   and --body-file in gh pr review calls

Also update Step 5 to clean up all temp files.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-29 20:43:01 +08:00
..
scripts Fix: Improve ripgrep binary detection and cross-platform compatibility (#1060) 2025-11-18 19:38:30 +08:00
src fix: use temp file + quoted heredoc for shell-safe comment body 2026-03-29 20:43:01 +08:00
vendor feat test tool permissions 2026-03-10 16:30:22 +08:00
index.ts fix: Remove remaining ClearcutLogger export from packages/core/index.ts 2026-02-01 14:52:14 +08:00
package.json Merge branch 'main' into feat/support-permission 2026-03-19 11:24:30 +08:00
test-setup.ts feat(core,cli): migrate console.debug to debugLogger (M3 Phase 1-3) 2026-01-25 20:57:25 +08:00
tsconfig.json Sync upstream Gemini-CLI v0.8.2 (#838) 2025-10-23 09:27:04 +08:00
vitest.config.ts Sync upstream Gemini-CLI v0.8.2 (#838) 2025-10-23 09:27:04 +08:00