mirror of
https://github.com/OliveTin/OliveTin
synced 2026-07-13 15:17:21 +00:00
jamesread
0e45f3b0e3
Block additional unvalidated argument types from shell actions, enforce full-string custom regex matching, and allowlist http/https URL schemes. Update checkbox integration test to use exec, matching the intended shell vs exec split for choiceless checkbox arguments. Co-authored-by: Cursor <cursoragent@cursor.com>