David Gageot 024b02e8f4 fix: harden shell-metachar detection and gh/rg pattern fixes ...

Reject zsh =(...) and fish (...) substitution in autoapproval and
session grants while preserving literal quoted parentheses. Allow
double-quoted regex escapes without triggering flag-expansion denial.
Allow `gh run list -w <workflow>` (workflow selector, not browser).

Assisted-By: docker-agent

2026-09-09 09:51:46 +02:00

..

classify.go

fix: harden shell-metachar detection and gh/rg pattern fixes

2026-09-09 09:51:46 +02:00

history_patterns_test.go

fix: harden shell-metachar detection and gh/rg pattern fixes

2026-09-09 09:51:46 +02:00

safety_patterns.json

fix: harden shell-metachar detection and gh/rg pattern fixes

2026-09-09 09:51:46 +02:00

safety_test.go

fix(safety): resolve cmd/command like the handlers when classifying and granting

2026-09-04 13:58:08 +02:00

safety.go

fix(safety): resolve cmd/command like the handlers when classifying and granting

2026-09-04 13:58:08 +02:00

shell_syntax_test.go

fix: harden shell-metachar detection and gh/rg pattern fixes

2026-09-09 09:51:46 +02:00