spark-store-project/spark-store
15
0
Fork 0
mirror of https://gitee.com/spark-store-project/spark-store synced 2026-06-14 02:03:51 +08:00
Code Issues 1 Packages Projects Releases Wiki Activity
Files
1270405907b0928e3b232f3ab6ac9d9703f925c2
spark-store/electron/main/backend
T
History
google-labs-jules[bot] 828ffd86e8 🔒 fix: Command Injection vulnerability in install-manager.ts 
- Changed `shell: true` to `shell: false` in `spawn` calls within `electron/main/backend/install-manager.ts`.
- Updated `AGENTS.md` documentation to reflect the security best practice.
- Verified that the fix prevents command injection using a reproduction script.

Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>
2026-03-10 15:53:44 +00:00
..
install-manager.ts
🔒 fix: Command Injection vulnerability in install-manager.ts
2026-03-10 15:53:44 +00:00