aeonframework bd1ed7ea76 harden: validate package-name charset in request_builder ... `request_builder` interpolates `package` verbatim into a device-shell action string. Every current caller reconciles the name against the live device package list first, so this is safe today — but the safety lives in the callers, not the sink. Add a local charset guard (Android app-ID set `[A-Za-z0-9_.]`) so a future caller passing an unreconciled or file-sourced name can't produce an injectable device-shell command. Rejects nothing legitimate; fails closed (emits no command) on a malformed name. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-22 10:54:06 -04:00
..
uad-cli	refactor: move theme to uad-gui; drop core gui deps; mark PmCommand must-use	2026-06-13 17:21:31 -07:00
uad-core	harden: validate package-name charset in request_builder	2026-06-22 10:54:06 -04:00
uad-gui	refactor: move theme to uad-gui; drop core gui deps; mark PmCommand must-use	2026-06-13 17:21:31 -07:00