- SlugGuard.IsValid() rejects slugs with path traversal (../, //, uppercase) - SlugGuard.ToSafePath() ensures sync writes stay within target directory - PushCommand: skip files with invalid slugs before upload - SyncCommand: validate server-returned slugs before writing to disk - EditCommand/NewCommand: try/finally guarantees temp file deletion on crash - NotesCache: set 600 permissions on cache file (metadata only, no token) - NewCommand: remove dead Sha256 method (HashHelper already covers this) |
||
|---|---|---|
| .. | ||
| Commands | ||
| Rendering | ||
| Repl | ||
| Security | ||
| NozCli.csproj | ||
| Program.cs | ||
| VersionInfo.cs | ||