mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-07 00:50:52 +00:00
f95d2e4a97
Static analysis tests that verify every cloud's upload_file() function uses safe patterns to prevent command injection. Tests cover: - Path validation (single-quote, $, backtick rejection) or printf '%q' escaping - Base64 content encoding before shell embedding - printf '%s' for safe output (no echo with variable expansion) - No eval on user-controlled input - PR #453 regression tests for fly, northflank, daytona, e2b, koyeb - Classification of all 30+ clouds into safe categories (ssh/scp/cp/exec-based) Agent: test-engineer Co-authored-by: A <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| __tests__ | ||
| commands-logic.ts | ||
| commands.ts | ||
| index.ts | ||
| manifest.ts | ||
| security.ts | ||
| unicode-detect.ts | ||
| update-check.ts | ||