1 Commits

Author	SHA1	Message	Date
James Feng	368dd99d01	fix(security): prevent shell injection in headersHelper (#36) ... - Parse headersHelper command with shell-quote to reject operators - Call execFileNoThrowWithCwd(cmd, args) without shell: true - Remove shell option from ExecFileWithCwdOptions type entirely - Add headersHelper.test.ts with injection rejection test - Fix existing MCP test mocks for compatibility Test: MCP tests 91/0, full suite 3058 pass (0 new failures)	2026-06-03 16:59:16 +08:00