5 Commits

Author	SHA1	Message	Date
jamesread	0e45f3b0e3	security: GHSA-xc5w-4v5w-7x65 (HIGH) harden shell argument type safety ... Block additional unvalidated argument types from shell actions, enforce full-string custom regex matching, and allowlist http/https URL schemes. Update checkbox integration test to use exec, matching the intended shell vs exec split for choiceless checkbox arguments. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-08 09:40:48 +01:00
jamesread	87f2a3287b	chore: invalid key in test config	2026-02-26 00:04:14 +00:00
jamesread	c4a8eadd3f	chore: Fix broken test configs	2026-02-25 23:15:57 +00:00
jamesread	b4157ed5ba	fix: argument validation on bindings	2025-12-25 01:16:04 +00:00
jamesread	09e1f0f984	fix: Argument validation targets the bindings (fixes checkboxes, etc)	2025-12-23 16:42:00 +00:00