mirror of
https://github.com/storytold/gridcraft.git
synced 2026-11-03 08:51:30 -06:00
cargo xtask keytips ran every command keytips.json names, with its params, under the user's file permissions (file.exportPdf could replace any file, also during --check). It also wrote target, excel and note strings into generated Rust without escaping. Probes now run inside the engine's ScriptSandbox, and those fields may not hold quotes, backslashes, braces or control characters.