Files
Andras BacsaiandClaude Opus 4.5 954203db8c fix: Add escapeshellarg() to prevent command injection in loadConfigFromGit
Add defense-in-depth shell argument escaping for repository URL, branch name,
and base_directory parameters in the loadConfigFromGit function. While input
validation rules already block dangerous characters, escapeshellarg() provides
an additional security layer at the function level.

Also adds comprehensive unit tests for shell argument escaping behavior.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-27 19:20:38 +01:00
..
2023-03-17 15:33:48 +01:00
2024-06-10 20:43:34 +00:00