Files
codebase-memory-mcp/tests
Martin Vogel 72e6a14adb mcp: reject an option-like base_branch in detect_changes
base_branch is spliced into `git diff --name-only "<base>"...HEAD`. The
existing check rejected shell metacharacters but not a leading '-', so a
value like --output=<path> was passed to git as an option and wrote the diff
to an arbitrary file. A real git ref never starts with '-'; reject it
alongside the metacharacter check.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>
2026-07-07 21:18:55 +02:00
..
2026-06-28 13:05:05 +02:00