fix: validate repo URL format on app creation (closes #88) #91

Merged
sneak merged 2 commits from fix/repo-url-validation into main 2026-02-20 11:58:49 +01:00

2 Commits

Author SHA1 Message Date
clawbot
a2087f4898 fix: restrict SCP-like URLs to git user only and reject path traversal
- Changed SCP regex to only accept 'git' as the username
- Added path traversal check: reject URLs containing '..'
- Added test cases for non-git users and path traversal
2026-02-20 02:51:38 -08:00
clawbot
a2fb42520d fix: validate repo URL format on app creation (closes #88) 2026-02-20 02:51:38 -08:00