Li Liu 38ff61471a fix: prevent command injection in history-collector via spawnSync ...

Replace execSync with spawnSync in getFileHistory() and getPRDetails()
to prevent shell injection through file paths and PR numbers. Add input
validation for prNumber (must be a positive integer).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-05 13:51:12 +08:00

..

history-collector.test.ts

fix: prevent command injection in history-collector via spawnSync

2026-03-05 13:51:12 +08:00

reference-collector.test.ts

fix: prevent command injection in reference-collector via spawnSync

2026-03-05 13:51:08 +08:00