Skip to content

Prevent path injection in shell menu cleanup with structured markers - #14

Merged
sudo-py-dev merged 1 commit into
mainfrom
coderabbit/secure-menu-cleanup-paths/8ccf0cba
Nov 9, 2026
Merged

sudo-py-dev merged 1 commit into
mainfrom
coderabbit/secure-menu-cleanup-paths/8ccf0cba

Conversation

@coderabbitai

@coderabbitai coderabbitai Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

Replace line-delimited shell menu markers with JSON that separates signatures from cleanup paths, preserving embedded newlines and preventing signature content from becoming deletion targets. Ignore legacy or malformed markers during cleanup and regenerate them on refresh.

Add regression tests for newline-containing paths and safe handling of legacy or malformed markers. Validation was not run.

View coding task

@coderabbitai

coderabbitai Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Important

Review skipped

This PR was authored by the user configured for CodeRabbit reviews. CodeRabbit does not review PRs authored by this user. It's recommended to use a dedicated user account to post CodeRabbit review feedback.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b79c14da-5809-4fec-ada6-532900ff06fb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

@sudo-py-dev
sudo-py-dev merged commit 012cb98 into main Nov 9, 2026
8 checks passed
@sudo-py-dev
sudo-py-dev deleted the coderabbit/secure-menu-cleanup-paths/8ccf0cba branch November 9, 2026 06:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant