Arun Kumar Thiagarajan 8876893c59 fix(security): validate JSON input in gstack-review-log ...

gstack-review-log appends its argument directly to a JSONL file with
no validation. Malformed or crafted input could corrupt the review log
or inject arbitrary content.

Fix: validate input is parseable JSON via python3 before appending.
Reject with exit 1 and stderr message if invalid.

2026-03-25 09:05:17 +05:30

714 B

Executable File

Raw Blame History

View Raw