spawn/sh/shared
A ee9ae46221
fix: reject control characters in GITHUB_TOKEN validation (#2241)
GITHUB_TOKEN containing newlines, tabs, or carriage returns could
corrupt ~/.config/gh/hosts.yml before permissions are set (line 314)
and bypass validation in downstream consumers. Defense-in-depth fix
following the pattern established in sh/shared/key-request.sh:78.

Fixes #2239

Agent: team-lead

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-06 03:11:23 -08:00
..
github-auth.sh fix: reject control characters in GITHUB_TOKEN validation (#2241) 2026-03-06 03:11:23 -08:00
key-request.sh fix: Exclude Daytona from key-request emails (#2237) 2026-03-06 00:04:48 -08:00