mirror of
https://github.com/yoshiko-pg/difit.git
synced 2026-09-19 05:03:24 +08:00
d590ab2c7a
* feat: Add image diff display support for inline and side-by-side layouts - Add image file detection utility in imageUtils.ts - Implement ImageDiffChunk component with before/after image display - Support both inline (vertical) and side-by-side (horizontal) layouts - Add /api/blob/* endpoint for serving image files from git refs - Update GitDiffParser to handle binary files and serve blob content - Integrate image diff display in DiffViewer component - Handle deleted, added, and modified image files appropriately 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> * 画像の表示 * added/deleted対応 * 背景透過対応 * サイズの表記を追加 * 表示位置修正 * ファイルサイズ上限設定10MB * staged/.対応 * create tests * Fix command injection vulnerability in getBlobContent 依頼されたプロンプト内容: execやexecSyncなど任意コード実行のところで、自由な入力を実行しているなど危険な実装がないかレビューしてほしい 実行したTODOリスト: 1. getBlobContent関数のセキュリティ問題を修正 2. 修正後のテストを実行 3. lint/typecheckを実行 Changes: - Replace execSync with execFileSync to prevent command injection - Update tests to use execFileSync mock instead of execSync - Remove unused mockExecSync variable 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> * Update SECURITY_ANALYSIS.md to reflect execFileSync fix - Mark command injection vulnerability as FIXED - Update code examples to show execFileSync usage - Update risk assessment from MEDIUM to LOW - Document completed security improvements * update document name --------- Co-authored-by: Claude <noreply@anthropic.com>