opencode 496ac5ec7c fix: prevent command injection via shell=True (issue #1, #3)
- Replace shell=True with shell=False + shlex.split()
- Add command whitelist to restrict allowed executables
- Parse commands safely to prevent metacharacter injection (;, &&, |, backticks)
2026-07-05 07:00:29 +00:00
..
2026-01-13 00:07:41 -06:00
2026-01-13 00:07:41 -06:00
2026-01-13 02:00:28 -06:00
2026-01-13 02:00:28 -06:00