A 255ffbf8b7 fix(security): use grep -F for literal string matching in PATH checks (#3021) ... Fixes #3019 Replace `grep -qx` with `grep -qxF` in the `ensure_in_path` function to prevent regex pattern injection. Without -F, attacker-controlled SPAWN_INSTALL_DIR or BUN_INSTALL env vars containing regex metacharacters (e.g. `/.*`) could cause false positive/negative PATH matches, potentially bypassing the symlink creation logic. Agent: issue-fixer Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>		2026-03-27 02:56:07 +07:00
..
install.ps1	refactor: remove packages/shared, deduplicate with CLI shared (#2257)	2026-03-06 21:58:42 -05:00
install.sh	fix(security): use grep -F for literal string matching in PATH checks (#3021)	2026-03-27 02:56:07 +07:00