Skip to content

validate target_remote at the install API boundary: hostile strings flow into backend daemon URLs across ALL resolve_*_url helpers - #2467

Merged
jaylfc merged 3 commits into
devfrom
exec/tsk-3rontv
Aug 17, 2026
Merged

jaylfc merged 3 commits into
devfrom
exec/tsk-3rontv