Dylan M. Taylor 1deb108a7c xtask: probe keytip commands without file access, and refuse text that could escape generated code (#3269) ...

* xtask: probe keytip commands without file access, and refuse text that could escape generated code

cargo xtask keytips ran every command keytips.json names, with its
params, under the user's file permissions (file.exportPdf could replace
any file, also during --check). It also wrote target, excel and note
strings into generated Rust without escaping. Probes now run inside the
engine's ScriptSandbox, and those fields may not hold quotes,
backslashes, braces or control characters.

* address review: make ScriptSandbox !Send so it drops on the thread that entered it

2026-11-10 18:04:13 -05:00

..

src

xtask: probe keytip commands without file access, and refuse text that could escape generated code (#3269)

2026-11-10 18:04:13 -05:00

Cargo.toml

i18n: missing translations are reported, never a failure (#2383)

2026-10-23 15:39:59 -04:00