clusev

Commit Graph

Author	SHA1	Message	Date
boban	5967b7b7e5	fix: shell-escape the install dir when generating the clusev CLI (R15 Codex) A checkout path containing shell syntax ($(), quotes) could otherwise inject code into /usr/local/bin/clusev, which runs as root via 'sudo clusev update'. Render the path through printf %q into an unquoted assignment; add a test that a hostile path does not execute injected code.	2026-06-20 13:50:19 +02:00
boban	580c72a59d	feat: clusev host CLI wrapper for short stack commands	2026-06-19 22:56:54 +02:00

Author

SHA1

Message

Date

boban

5967b7b7e5

fix: shell-escape the install dir when generating the clusev CLI (R15 Codex)

A checkout path containing shell syntax ($(), quotes) could otherwise inject
code into /usr/local/bin/clusev, which runs as root via 'sudo clusev update'.
Render the path through printf %q into an unquoted assignment; add a test that
a hostile path does not execute injected code.

2026-06-20 13:50:19 +02:00

boban

580c72a59d

feat: clusev host CLI wrapper for short stack commands

2026-06-19 22:56:54 +02:00

2 Commits (bf4366dfc946e192644962fc5dfd4bd1edbbfc9a)