forgejo-mcp/.claude/commands
Christoph Görn 8b255f90b3
fix: 🔒️ prevent shell injection in code-review CLI fallback
Replace inline JSON argument with temp file pattern to prevent
shell injection when PR content contains quotes/metacharacters.

Finding descriptions derived from untrusted PR diffs could break
shell quoting in the CLI fallback command. The heredoc pattern
prevents any shell expansion.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-06 18:55:03 +01:00
..
opsx chore: 🚀 add OpenSpec workflow, beads issue tracker, and merge PR proposal 2026-01-30 08:25:11 +01:00
catchup.md chore: 🚀 more claude config 2026-01-30 08:17:36 +01:00
code-review.md fix: 🔒️ prevent shell injection in code-review CLI fallback 2026-02-06 18:55:03 +01:00
commit.md chore: 🚀 more claude config 2026-01-30 08:17:36 +01:00