Skip to content

Stop treating quoted eval in commit messages as shell eval - #488

Merged
TheGreatAxios merged 2 commits into
mainfrom
cl-6551-quoted-eval-in-git-commit-messages-is-refused-as-a-shell
Aug 22, 2026
Merged

Stop treating quoted eval in commit messages as shell eval#488
TheGreatAxios merged 2 commits into
mainfrom
cl-6551-quoted-eval-in-git-commit-messages-is-refused-as-a-shell

Conversation

@TheGreatAxios

Copy link
Copy Markdown
Collaborator

Summary

  • Quoted eval inside git commit -m is no longer hard-denied as a shell eval.
  • Double-quoted command substitution eval still denies. Nested leftover is CL-6571.

Verification

  • bun test src/shell/run-shell-authz.test.ts passes (65 tests)

Fixes CL-6551

@linear-code

linear-code Bot commented Aug 22, 2026

Copy link
Copy Markdown

CL-6551

@TheGreatAxios
TheGreatAxios merged commit 2f22132 into main Aug 22, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant