mahanandhi fb35635c10 Security: use execFileSync instead of execSync with shell strings (#20655) ...

Replace execSync (which spawns a shell) with execFileSync (which
invokes the binary directly with an argv array). This eliminates
command injection risk from interpolated arguments.

Co-authored-by: sirishacyd <sirishacyd@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-19 03:19:09 -08:00

..

arg-split.ts

refactor(daemon): share quoted arg splitter

2026-02-15 12:49:30 +00:00

constants.test.ts

test: remove duplicate daemon profile trim wrappers

2026-02-16 06:53:13 +00:00

constants.ts

refactor(daemon): share service description resolve

2026-02-16 00:36:43 +00:00

diagnostics.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

exec-file.ts

refactor: dedupe daemon exec wrappers

2026-02-15 03:53:53 +00:00

inspect.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

launchd-plist.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

launchd.test.ts

test(daemon): dedupe service path cases and bootstrap failures

2026-02-19 10:17:48 +00:00

launchd.ts

refactor(daemon): share service arg types across backends

2026-02-19 10:04:19 +00:00

node-service.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

output.ts

refactor(daemon): dedupe install output line writing

2026-02-18 23:58:05 +00:00

paths.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

program-args.test.ts

revert: Switch back to tsc for compiling.

2026-01-31 18:31:49 +09:00

program-args.ts

Security: use execFileSync instead of execSync with shell strings (#20655)

2026-02-19 03:19:09 -08:00

runtime-format.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

runtime-parse.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

runtime-paths.test.ts

fix(daemon): guard preferred node selection

2026-02-17 10:01:54 -05:00

runtime-paths.ts

fix(daemon): guard preferred node selection

2026-02-17 10:01:54 -05:00

schtasks-exec.ts

refactor: dedupe daemon exec wrappers

2026-02-15 03:53:53 +00:00

schtasks.test.ts

test(daemon): dedupe service path cases and bootstrap failures

2026-02-19 10:17:48 +00:00

schtasks.ts

refactor(daemon): share service arg types across backends

2026-02-19 10:04:19 +00:00

service-audit.test.ts

fix(ci): restore main lint/typecheck after direct merges

2026-02-16 23:26:11 +00:00

service-audit.ts

fix(daemon): warn on token drift during restart (#18018)

2026-02-16 23:59:50 +01:00

service-env.test.ts

Fix LaunchAgent missing TMPDIR causing SQLITE_CANTOPEN on macOS (#20512)

2026-02-18 21:42:35 -05:00

service-env.ts

Fix LaunchAgent missing TMPDIR causing SQLITE_CANTOPEN on macOS (#20512)

2026-02-18 21:42:35 -05:00

service-runtime.ts

fix: improve gateway diagnostics

2026-01-08 02:29:32 +01:00

service-types.ts

refactor(daemon): share service arg types across backends

2026-02-19 10:04:19 +00:00

service.ts

refactor(daemon): simplify gateway service backend delegates

2026-02-19 10:04:19 +00:00

systemd-hints.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

systemd-linger.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

systemd-unit.ts

refactor(daemon): share service arg types across backends

2026-02-19 10:04:19 +00:00

systemd.test.ts

test(daemon): dedupe service path cases and bootstrap failures

2026-02-19 10:17:48 +00:00

systemd.ts

refactor(daemon): share service arg types across backends

2026-02-19 10:04:19 +00:00