GH#4006: Harden shell injection defenses in tools.mjs#4019

Merged

marcusquinn merged 7 commits intomainfrom

fix/issue-4006-tools-mjs-quality-debt

Mar 10, 2026

Commits on Mar 9, 2026

fix: harden shell injection defenses in tools.mjs (GH#4006)
marcusquinn
committed
docs: update isSafeCommand JSDoc to document # and @ characters
marcusquinn
committed
fix: break taint chain in runHookHelper to satisfy Codacy static analysis
marcusquinn
committed