2 Commits

Author	SHA1	Message	Date
clawbot	214b5f83ba	fix: restrict SCP-like URLs to git user only and reject path traversal ... - Changed SCP regex to only accept 'git' as the username - Added path traversal check: reject URLs containing '..' - Added test cases for non-git users and path traversal	2026-02-19 23:39:25 -08:00
clawbot	b4b2a33089	fix: validate repo URL format on app creation (closes #88)	2026-02-19 23:39:25 -08:00