Skip to content

v2.0.15

Latest
Latest

Choose a tag to compare

View all tags
@cfdude cfdude released this 18 Sep 04:01
· 6 commits to dev since this release
v2.0.15
132ca35
This commit was signed with the committer’s verified signature.
cfdude Rob Sherman
SSH Key Fingerprint: fgBepoGqnYvAE7fVaCyGLMoJA1bQUVtMn/0u8IyVAE4
Verified
Learn about vigilant mode.

Security

  • Hardened command execution by disabling shell parsing by default and eliminating the command-injection vector reported in #19.

Added

  • New CommandService configuration options, including useShell and defaultTimeout, plus isShellEnabled for diagnostics.
  • Environment variable overrides (SUPER_SHELL_USE_SHELL, CUSTOM_SHELL, SUPER_SHELL_COMMAND_TIMEOUT) to opt into legacy shell behaviour when absolutely necessary.

Testing

  • npm test
Assets 2
Loading