fix: validate reviewAgentLogPath to prevent path injection - #1134

Merged

msukkari merged 9 commits into

mainfrom

cursor/fix-path-injection-codeql-05f4

Apr 18, 2026

Commits on Apr 18, 2026

fix: validate reviewAgentLogPath to prevent path injection

cursoragent
and
msukkari
committed
61affd7
chore: add CHANGELOG entry for path injection fix

cursoragent
and
msukkari
committed
87894f8
refactor: share REVIEW_AGENT_LOG_DIR constant between app.ts and invokeDiffReviewLlm.ts

cursoragent
and
msukkari
committed
9b6e216
docs: add guidance to link PRs to Linear issues in PR description

cursoragent
and
msukkari
committed
f887d91
fix: use lazy evaluation for REVIEW_AGENT_LOG_DIR to fix build

cursoragent
and
msukkari
committed
cee5e31
docs: add requirement to run tests and build before pushing

cursoragent
and
msukkari
committed
476081e
Revert "docs: add requirement to run tests and build before pushing"
cursoragent
committed
c891f82
Merge branch 'main' into cursor/fix-path-injection-codeql-05f4
msukkari
authored
154b096
Merge branch 'main' into cursor/fix-path-injection-codeql-05f4
msukkari
authored
3ed9937