fix(libvirt): reject shell injection via guest init-script interface fields - #1085

Closed

doublewhy wants to merge 6 commits into

devfrom

fix-libvirt-shell-injection

Commits on Aug 12, 2026

fix(libvirt): reject shell injection via TechVault interface fields

authored and
Yernat Yestekov
committed
f5ddceb
test(libvirt): cover the guest-appliance init-script injection guard

authored and
Yernat Yestekov
committed
fd41f03
fix(libvirt): reject cidr_prefix strings that int() cannot parse

authored and
Yernat Yestekov
committed
ae54ccc
chore(libvirt): drop an accidentally committed .DS_Store

authored and
Yernat Yestekov
committed
3baadd9
test(libvirt): share the guest init-script interface fixtures

authored and
Yernat Yestekov
committed
451683a
test(libvirt): build the hostile domain outside the raises block

authored and
Yernat Yestekov
committed
7250f8c