google-labs-jules[bot] 828ffd86e8 🔒 fix: Command Injection vulnerability in install-manager.ts ...

- Changed `shell: true` to `shell: false` in `spawn` calls within `electron/main/backend/install-manager.ts`.
- Updated `AGENTS.md` documentation to reflect the security best practice.
- Verified that the fix prevents command injection using a reproduction script.

Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>

2026-03-10 15:53:44 +00:00

..

backend

🔒 fix: Command Injection vulnerability in install-manager.ts

2026-03-10 15:53:44 +00:00

deeplink.ts

完成 -apm 的全部更改，实现 spk://search，移除 spk://store

2026-02-19 19:56:32 +08:00

handle-url-scheme.ts

完成 -apm 的全部更改，实现 spk://search，移除 spk://store

2026-02-19 19:56:32 +08:00

index.ts

fix:通过E2E测试

2026-03-10 00:52:59 +08:00