Fix CVE-2026-8450: send_file() honoured 2-arg open() shell-magic#89

Merged

oalders merged 7 commits into

May 19, 2026

Commits on May 19, 2026

Fix CVE-2026-8450: send_file() honoured 2-arg open() shell-magic

oalders
and
claude
committed
Add regression test for send_file() shell-magic refusal

oalders
and
claude
committed
CI: fold lint job into build-and-test workflow

oalders
and
claude
committed
precious: enforce no 2-arg open and fix TestServer

oalders
and
claude
committed
TestServer: pass daemon command to open() as a list

oalders
and
claude
committed
TestServer: inline single-use perl_cmd() into start()

oalders
and
claude
committed
t/send-file-magic-open: drop redundant pipe spellings

oalders
and
claude
committed