Tabish Bidiwale acdce5b2ba fix: validate change name format to prevent path traversal ...

Add validation in validateChangeExists() to ensure --change parameter
is a valid kebab-case ID before constructing file paths. This prevents
path traversal attacks like --change "../foo" or --change "/etc/passwd".

- Reuses existing validateChangeName() from change-utils.ts
- Adds 3 tests for path traversal, absolute paths, and slashes

2025-12-29 16:49:09 +11:00

..

cli-e2e

feat: add factory function support for slash commands (#178)

2025-10-14 21:19:58 +11:00

commands

fix: validate change name format to prevent path traversal

2025-12-29 16:49:09 +11:00

core

feat: unify change state model for scaffolded changes

2025-12-29 16:29:47 +11:00

fixtures/tmp-init/openspec

feat: implement Phase 1 E2E testing with cross-platform CI matrix (#80)

2025-09-29 22:20:30 +10:00

helpers

proposal: add artifact graph core query system (#400)

2025-12-25 22:09:42 +11:00

utils

feat: add change creation utilities (#408)

2025-12-26 22:14:56 +11:00