OdinKral 1e650266ab fix: block path traversal in pattern name lookup (closes #2094) ... Pattern names containing ".." could be used to escape the patterns directory and read arbitrary files via filepath.Join. Guard added at the top of getFromDB; i18n key pattern_invalid_name added to all 11 locale files; test cases cover all common traversal variants. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-07-28 08:08:03 -07:00
..
ai	feat: add Claude Opus 5 support and refresh dependencies	2026-07-24 11:47:51 -07:00
db	fix: block path traversal in pattern name lookup (closes #2094)	2026-07-28 08:08:03 -07:00
strategy	fix(chat): prevent streaming deadlock and unify strategy handling	2026-03-18 04:42:03 +05:30
template	fix: shell-escape extension values to prevent command injection	2026-07-01 21:55:21 -05:00
plugin.go	refactor: move NeedsRawMode default implementation to PluginBase	2026-02-26 12:39:49 -08:00
plugin_test.go	refactor: add NewVendorPluginBase factory function to reduce duplication	2026-01-11 20:12:58 -08:00