spark-store

spark-store-project/spark-store

Fork 0

mirror of https://gitee.com/spark-store-project/spark-store synced 2026-08-09 07:13:58 +08:00

Commit Graph

Author	SHA1	Message	Date
google-labs-jules[bot]andvmomenv	828ffd86e8	🔒 fix: Command Injection vulnerability in install-manager.ts - Changed `shell: true` to `shell: false` in `spawn` calls within `electron/main/backend/install-manager.ts`. - Updated `AGENTS.md` documentation to reflect the security best practice. - Verified that the fix prevents command injection using a reproduction script. Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>	2026-03-10 15:53:44 +00:00

Author

SHA1

Message

Date

google-labs-jules[bot]andvmomenv

828ffd86e8

🔒 fix: Command Injection vulnerability in install-manager.ts

- Changed `shell: true` to `shell: false` in `spawn` calls within `electron/main/backend/install-manager.ts`.
- Updated `AGENTS.md` documentation to reflect the security best practice.
- Verified that the fix prevents command injection using a reproduction script.

Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>

2026-03-10 15:53:44 +00:00