mirror of
https://github.com/garrytan/gstack.git
synced 2026-05-09 14:09:47 +08:00
02c76d3e8c
Whitelist safe characters (a-zA-Z0-9._-) in SLUG and BRANCH output to prevent shell metacharacter injection when used with eval. Only affects self-hosted git servers with lax naming rules — GitHub and GitLab enforce safe characters already. Defense-in-depth.