mirror of
https://github.com/whyour/qinglong.git
synced 2026-10-16 22:35:32 +08:00
whyour
2cab112391
* fix: harden scoped API inputs and isolate login throttling * fix: close script path gaps and harden security boundaries * fix: preserve subscription aliases and avoid extension eval * fix: allow cancelling invalid historical subscriptions * fix: make script parent validation explicit for CodeQL * fix: limit command execution and clarify trusted path branches * fix: separate diff tool script access from config APIs * fix: clean up obsolete subscription SSH credentials
6 lines
259 B
TypeScript
6 lines
259 B
TypeScript
/** Quote one literal POSIX shell argument, including quotes and substitutions. */
|
|
export function shellQuote(value: string): string {
|
|
if (value.includes('\0')) throw new Error('Invalid shell argument');
|
|
return "'" + value.replace(/'/g, "'\\''") + "'";
|
|
}
|