mahanandhi fb35635c10 Security: use execFileSync instead of execSync with shell strings (#20655) ...

Replace execSync (which spawns a shell) with execFileSync (which
invokes the binary directly with an argv array). This eliminates
command injection risk from interpolated arguments.

Co-authored-by: sirishacyd <sirishacyd@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-19 03:19:09 -08:00

5.1 KiB

Raw Blame History

View Raw