03b3e4b3ff
The first segment of an unquoted header value may open on an escape pair, so a value whose first byte is an escaped space is consumed, while an escaped-quote opener still falls to the caller's own rules. That first segment is bounded by whitespace only: a raw HTTP diagnostic carries an opaque credential the same way, so a shell metacharacter inside it is a credential byte. Only a continuation segment after a closing quote stops at a metacharacter, which keeps a following separator or command intact. Claude-Session: https://claude.ai/code/session_01RYigf3eMFJjey9iKRApPGE |
||
|---|---|---|
| .. | ||
| adapter-utils | ||
| adapters | ||
| db | ||
| google-sheets-mcp-server | ||
| kv-demo-mcp-server | ||
| mcp-server | ||
| paperclip-eval-kernel | ||
| paperclip-runner | ||
| plugins | ||
| shared | ||
| skills-catalog | ||
| tailscale-https-broker | ||
| teams-catalog | ||