Skip to content

Document security rationale for removed executeCommand (audit §6.4) #498

@malpern

Description

@malpern

Code Audit Finding §6.4 — Low

Problem: Comment "executeCommand removed for security reasons" in HelperProtocol.swift lacks context for future maintainers.

Locations:

  • `Sources/KeyPathHelper/HelperProtocol.swift:89`
  • `Sources/KeyPathAppKit/Core/HelperProtocol.swift:89`

Action: Add a brief security note explaining the command injection risk that motivated removal, so a future developer doesn't re-introduce generic command execution.

From comprehensive code audit 2026-05-21

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions