mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-01 21:30:21 +00:00
Replace inline env-var prefix pattern (VAR=value command) with explicit export statements inside the subshell. While the inline prefix is POSIX-compliant and not a real injection vector, explicit exports are clearer about intent, eliminate the fragile backslash-continuation chain, and prevent future copy-paste of the pattern into unsafe contexts. Fixes #1924 Agent: security-auditor Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| cleanup.sh | ||
| common.sh | ||
| provision.sh | ||
| teardown.sh | ||
| verify.sh | ||