Affaan Mustafa a62a3a2416 fix: sanitize getExecCommand args, escape regex in getCommandPattern, clean up readStdinJson timeout, add 10 tests ... Validate args parameter in getExecCommand() against SAFE_ARGS_REGEX to prevent command injection when returned string is passed to a shell. Escape regex metacharacters in getCommandPattern() generic action branch to prevent malformed patterns and unintended matching. Clean up stdin listeners in readStdinJson() timeout path to prevent process hanging.		2026-02-13 02:27:04 -08:00
..
ci	fix: reject whitespace-only command/field values in CI validators, add 10 tests	2026-02-13 02:09:22 -08:00
hooks	fix: eliminate command injection in hooks, fix pass-through newline corruption, add 8 tests	2026-02-13 02:22:55 -08:00
integration	fix: calendar-accurate date validation in parseSessionFilename, add 22 tests	2026-02-13 01:42:56 -08:00
lib	fix: sanitize getExecCommand args, escape regex in getCommandPattern, clean up readStdinJson timeout, add 10 tests	2026-02-13 02:27:04 -08:00
scripts	fix: clamp progressBar to prevent RangeError on overflow, add 10 tests	2026-02-13 02:01:57 -08:00
run-all.js	fix: greedy regex in validate-commands captures all refs per line, add 18 tests	2026-02-13 01:52:30 -08:00