fix(ng-dev): prevent OS command injection in ChildProcess wrappers#3601

Open

herdiyana256 wants to merge 3 commits intoangular:mainfrom

herdiyana256:fix/ngdev-childprocess-shell-injection

Commits on Apr 11, 2026

fix(ng-dev): prevent OS command injection in ChildProcess wrappers
herdiyana256
committed
fix(ng-dev): address code review feedback on shell:false PR
herdiyana256
committed

Commits on Apr 14, 2026

fix(ng-dev): expose shell option in SpawnOptions, default to false
herdiyana256
committed