Skip to content

fix: prevent argument injection in extract_issues.py (fixes #318) - #342

Closed
KooshaPari wants to merge 1 commit into
simonw:mainfrom
KooshaPari:fix-318-arg-injection
Closed

KooshaPari wants to merge 1 commit into
simonw:mainfrom
KooshaPari:fix-318-arg-injection

Conversation

@KooshaPari

Copy link
Copy Markdown

Fixes #318

Changes

  • Added validation to reject inputs starting with - that could be interpreted as git flags
  • Prevents injection of arbitrary git options like --output=/tmp/file
  • Added null byte validation
  • Added range format validation
  • Replaced sys.exit() with raised exceptions for safe import by MCP servers

Copilot AI lite review requested due to automatic review settings September 13, 2026 05:55

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@KooshaPari KooshaPari closed this by deleting the head repository Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Argument injection

2 participants