mahanandhi fb35635c10 Security: use execFileSync instead of execSync with shell strings (#20655) ...

Replace execSync (which spawns a shell) with execFileSync (which
invokes the binary directly with an argv array). This eliminates
command injection risk from interpolated arguments.

Co-authored-by: sirishacyd <sirishacyd@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-19 03:19:09 -08:00

..

arg-split.ts

…

constants.test.ts

test: remove duplicate daemon profile trim wrappers

2026-02-16 06:53:13 +00:00

constants.ts

…

diagnostics.ts

…

exec-file.ts

…

inspect.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

launchd-plist.ts

…

launchd.test.ts

test(daemon): dedupe service path cases and bootstrap failures

2026-02-19 10:17:48 +00:00

launchd.ts

refactor(daemon): share service arg types across backends

2026-02-19 10:04:19 +00:00

node-service.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

output.ts

refactor(daemon): dedupe install output line writing

2026-02-18 23:58:05 +00:00

paths.ts

…

program-args.test.ts

…

program-args.ts

Security: use execFileSync instead of execSync with shell strings (#20655)

2026-02-19 03:19:09 -08:00

runtime-format.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

runtime-parse.ts

…

runtime-paths.test.ts

fix(daemon): guard preferred node selection

2026-02-17 10:01:54 -05:00

runtime-paths.ts

fix(daemon): guard preferred node selection

2026-02-17 10:01:54 -05:00

schtasks-exec.ts

…

schtasks.test.ts

test(daemon): dedupe service path cases and bootstrap failures

2026-02-19 10:17:48 +00:00

schtasks.ts

refactor(daemon): share service arg types across backends

2026-02-19 10:04:19 +00:00

service-audit.test.ts

fix(ci): restore main lint/typecheck after direct merges

2026-02-16 23:26:11 +00:00

service-audit.ts

fix(daemon): warn on token drift during restart (#18018)

2026-02-16 23:59:50 +01:00

service-env.test.ts

Fix LaunchAgent missing TMPDIR causing SQLITE_CANTOPEN on macOS (#20512)

2026-02-18 21:42:35 -05:00

service-env.ts

Fix LaunchAgent missing TMPDIR causing SQLITE_CANTOPEN on macOS (#20512)

2026-02-18 21:42:35 -05:00

service-runtime.ts

…

service-types.ts

refactor(daemon): share service arg types across backends

2026-02-19 10:04:19 +00:00

service.ts

refactor(daemon): simplify gateway service backend delegates

2026-02-19 10:04:19 +00:00

systemd-hints.ts

…

systemd-linger.ts

…

systemd-unit.ts

refactor(daemon): share service arg types across backends

2026-02-19 10:04:19 +00:00

systemd.test.ts

test(daemon): dedupe service path cases and bootstrap failures

2026-02-19 10:17:48 +00:00

systemd.ts

refactor(daemon): share service arg types across backends

2026-02-19 10:04:19 +00:00