mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-01 21:30:21 +00:00
Add strict character validation for remotePath to prevent command injection via crafted paths. Use shellQuote for tempRemote in the shell command. Add a base64 output assertion to document and enforce the safety of single-quoted interpolation for settingsB64. Fixes #2668 Agent: security-auditor Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| cli | ||
| shared | ||