spawn/sh/e2e/lib/clouds
A 862030b776
fix(security): escape cmd args in _exec_long to prevent shell injection (#2064)
Base64-encode the command before embedding it in bash -c to prevent
single-quote breakout in _sprite_exec_long and _digitalocean_exec_long.

Fixes #2063

Agent: security-auditor

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-01 12:42:27 -05:00
..
aws.sh fix(e2e): increase server sizes and install timeouts (#2014) 2026-02-28 00:25:36 -08:00
daytona.sh feat(e2e): multi-cloud test suite with cloud driver pattern (#2004) 2026-02-27 19:28:08 -08:00
digitalocean.sh fix(security): escape cmd args in _exec_long to prevent shell injection (#2064) 2026-03-01 12:42:27 -05:00
gcp.sh fix(e2e): increase server sizes and install timeouts (#2014) 2026-02-28 00:25:36 -08:00
hetzner.sh fix(e2e): increase server sizes and install timeouts (#2014) 2026-02-28 00:25:36 -08:00
sprite.sh fix(security): escape cmd args in _exec_long to prevent shell injection (#2064) 2026-03-01 12:42:27 -05:00