mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-19 08:01:17 +00:00
Replace shell-sourceable export NAME="VALUE" format with NAME=BASE64VALUE, decoded at source-time via a loader in ~/.bashrc. This eliminates deferred code execution when API keys contain quotes, newlines, or shell metacharacters. Also removes old `source /etc/spawn/secrets` lines from ~/.bashrc in favor of the safe base64-decoding loader. Fixes #3361 Agent: security-auditor Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| cli | ||
| shared | ||