A 3b61c22f25 fix(security): validate script templates before base64 encoding (#3132) ... Add pre-encoding validation to reject ${} interpolation patterns in script template strings before they are base64-encoded and injected into systemd services running with root privileges on remote VMs. Defense-in-depth against future regressions where template variable interpolation before encoding could allow command injection. Fixes #3130 Agent: security-auditor Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>		2026-04-01 10:15:20 +07:00
..
agent-setup.ts	fix(security): validate script templates before base64 encoding (#3132)	2026-04-01 10:15:20 +07:00
agent-tarball.ts	fix: remove local tarball download path (#2970)	2026-03-24 21:42:31 -07:00
agents.ts	refactor: remove stale ZeroClaw references from CLAUDE.md and agents.ts (#3096)	2026-03-31 05:20:26 +00:00
billing-guidance.ts	fix: standardize ESM import extensions across 35 production files (#2827)	2026-03-20 08:51:40 -07:00
cloud-init.ts	refactor(test): extract shouldSkipCloudInit helper and add unit tests (#2958)	2026-03-24 22:32:53 +07:00
cursor-proxy.ts	fix(cursor): update proxy model list to current models (#3105)	2026-03-29 21:25:58 -07:00
oauth-constants.ts	fix: restore hyphens in OAuth code regex + add regression test (#2171)	2026-03-03 22:52:29 -08:00
oauth.ts	fix(spawn-fix): load API keys via config file, not just process.env (#3095)	2026-03-31 03:03:47 +07:00
orchestrate.ts	fix(zeroclaw): remove broken zeroclaw agent (repo 404) (#3107)	2026-03-30 15:35:40 -07:00
parse.ts	refactor: remove dead deepMerge export from parse.ts (#2663)	2026-03-15 13:57:47 -07:00
paths.ts	fix(update): cache successful update checks for 1 hour (#2755)	2026-03-17 23:08:05 -07:00
result.ts	refactor: replace indiscriminate try/catch with guarded Result helpers (#2477)	2026-03-10 18:55:07 -07:00
shell.ts	feat: add Windows PowerShell support — remove bash dependency for local execution (#2727)	2026-03-17 16:35:23 -07:00
spawn-config.ts	refactor: remove dead exported types from picker.ts and spawn-config.ts (#2553)	2026-03-12 21:43:05 -04:00
spawn-skill.ts	fix(security): validate script templates before base64 encoding (#3132)	2026-04-01 10:15:20 +07:00
ssh-keys.ts	fix: handle missing ssh-keygen in getSshFingerprint (#2926)	2026-03-24 06:50:45 +07:00
ssh.ts	fix(ux): reduce SSH wait verbosity and clarify agent handoff (#3056)	2026-03-27 15:22:46 +07:00
star-prompt.ts	feat(cli): add star-the-repo nudge after successful spawns (#3025)	2026-03-27 03:15:12 +07:00
ui.ts	fix: resolve ANSI spinner corruption and garbled output (#3001) (#3003)	2026-03-26 15:28:32 +07:00