fix: validate reviewAgentLogPath to prevent path injection#1134

Merged

msukkari merged 9 commits intomainfrom

cursor/fix-path-injection-codeql-05f4

Apr 18, 2026

Commits on Apr 18, 2026

fix: validate reviewAgentLogPath to prevent path injection

cursoragent
and
msukkari
committed
chore: add CHANGELOG entry for path injection fix

cursoragent
and
msukkari
committed
refactor: share REVIEW_AGENT_LOG_DIR constant between app.ts and invokeDiffReviewLlm.ts

cursoragent
and
msukkari
committed
docs: add guidance to link PRs to Linear issues in PR description

cursoragent
and
msukkari
committed
fix: use lazy evaluation for REVIEW_AGENT_LOG_DIR to fix build

cursoragent
and
msukkari
committed
docs: add requirement to run tests and build before pushing

cursoragent
and
msukkari
committed
Revert "docs: add requirement to run tests and build before pushing"
cursoragent
committed
Merge branch 'main' into cursor/fix-path-injection-codeql-05f4
msukkari
authored
Merge branch 'main' into cursor/fix-path-injection-codeql-05f4
msukkari
authored