spawn/sh
A 548cfdf0b1
fix(security): apply base64 exec escaping to remaining 4 cloud drivers (#2067)
PR #2064 fixed _exec_long shell injection for DigitalOcean and Sprite
but missed the same bash -c '${cmd}' pattern in Hetzner, GCP, AWS, and
Daytona. Apply the same base64-encoding fix to all four.

Agent: security-auditor

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-01 11:50:33 -08:00
..
aws fix(e2e): add sh/aws/hermes.sh and mark aws/hermes as implemented (#2042) 2026-02-28 20:38:26 -05:00
cli fix: export PATH after bun install to fix current-shell availability (#1877) 2026-02-24 04:51:00 -05:00
daytona feat: SPAWN_CLI_DIR env var to force local source in e2e (#2015) 2026-02-28 04:14:36 -05:00
digitalocean feat: SPAWN_CLI_DIR env var to force local source in e2e (#2015) 2026-02-28 04:14:36 -05:00
docker feat!: remove Fly.io cloud provider support (#1979) 2026-02-27 00:06:32 -05:00
e2e fix(security): apply base64 exec escaping to remaining 4 cloud drivers (#2067) 2026-03-01 11:50:33 -08:00
gcp feat: SPAWN_CLI_DIR env var to force local source in e2e (#2015) 2026-02-28 04:14:36 -05:00
hetzner feat: SPAWN_CLI_DIR env var to force local source in e2e (#2015) 2026-02-28 04:14:36 -05:00
local feat: Bun workspace monorepo — packages/cli + packages/shared (#1853) 2026-02-23 22:07:05 -08:00
shared refactor: Remove dead code and stale references (#2059) 2026-03-01 08:26:10 -05:00
sprite feat(agent): add Hermes Agent (Nous Research) (#2023) 2026-02-28 06:53:13 -08:00
test refactor: Remove dead code and stale references (#2062) 2026-03-01 11:45:24 -05:00