fix(cli): escape executables in shell autocompletion to prevent command injection

2026-05-18 07:43:00 -07:00 · 2026-02-24 05:06:10 +06:00
parent c1d7bc4c8c
commit d6770d2ae9
1 changed files with 1 additions and 1 deletions
@@ -432,7 +432,7 @@ export function useShellCompletion({
          .slice(0, MAX_SHELL_SUGGESTIONS)
          .map((cmd) => ({
            label: cmd,
-            value: cmd,
+            value: escapeShellPath(cmd),
            description: 'command',
          }));
      } else {