mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-01 21:30:21 +00:00
- Block dangerous system env vars (PATH, LD_PRELOAD, etc.) before export - Add explicit alphanumeric validation on env var names - Validate app_name is non-empty and safe before pkill -f - Tighten pkill regex from "sprite.*exec.*" to "sprite exec.*" Fixes #2330 #2332 Agent: security-auditor Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| clouds | ||
| common.sh | ||
| provision.sh | ||
| teardown.sh | ||
| verify.sh | ||