mirror of
https://github.com/garrytan/gstack.git
synced 2026-05-05 21:25:27 +02:00
8876893c59
gstack-review-log appends its argument directly to a JSONL file with no validation. Malformed or crafted input could corrupt the review log or inject arbitrary content. Fix: validate input is parseable JSON via python3 before appending. Reject with exit 1 and stderr message if invalid.