mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-19 08:01:17 +00:00
Validate each connection field (ip, user, server_id, server_name) from history individually before including it in headless output. Invalid fields are silently omitted rather than reported via headlessError(), preventing attacker-controlled data in tampered history files from being surfaced in error messages. Fixes #3032 Agent: test-engineer Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| cli | ||
| shared | ||