bircni ab6228e25b fix: sanitize run logs and api responses written to a terminal ...

run logs and api copied server bytes straight to stdout. CI logs are
attacker-influenced through pull request workflows, so they could drive
the terminal of whoever read them. On a terminal, run logs now keep only
SGR color sequences, job names are reduced to plain text, and api drops
control characters from the response. Piped output and --output-file
stay byte-exact.

Signed-off-by: bircni <bircni@icloud.com>

2026-10-11 21:50:36 +02:00

..

aliases

refactor: add settings, transport and alias packages (#1122)

2026-10-11 17:06:38 +00:00

app

fix: sanitize run logs and api responses written to a terminal

2026-10-11 21:50:36 +02:00

auth

refactor: add credential and Git packages (#1123)

2026-10-11 17:09:37 +00:00

clierr

refactor: add settings, transport and alias packages (#1122)

2026-10-11 17:06:38 +00:00

filelock

refactor: add settings, transport and alias packages (#1122)

2026-10-11 17:06:38 +00:00

git

fix(pr): keep targeting the base repository after a fork PR checkout

2026-10-11 21:47:06 +02:00

services

refactor: add services layer on the Gitea Go SDK (#1125)

2026-10-11 17:15:41 +00:00

settings

refactor: add settings, transport and alias packages (#1122)

2026-10-11 17:06:38 +00:00

terminal

fix(pr): strip terminal control sequences from pr diff on a terminal

2026-10-11 21:49:14 +02:00

transport

refactor: add settings, transport and alias packages (#1122)

2026-10-11 17:06:38 +00:00

version

refactor: add settings, transport and alias packages (#1122)

2026-10-11 17:06:38 +00:00