mirror of https://github.com/garrytan/gstack.git
39702a90ae
- Add validateOutputPath() to ensure screenshot, pdf, and responsive commands only write to /tmp or current working directory - Add validateReadPath() to prevent eval command from reading files outside allowed directories or using path traversal (..) - Validates both absolute paths and relative paths with .. sequences Security impact: Prevents arbitrary file write (screenshot/pdf) and arbitrary file read (eval) attacks via path traversal. Fixes: #13 |
||
|---|---|---|
| .. | ||
| src | ||
| test | ||
| SKILL.md | ||