Martin BallandClaude Opus 5.5 d8d75e4473 #3692: wordcraft-cli zotero escapes peer text on stderr ...

Audit finding 79 (CWE-117): the CLI printed Zotero's alert text (and, with
--trace, the method name and call/reply JSON) to stderr as received, so a peer
on Zotero's port could end the "Zotero:" line, forge following output or send
terminal escape sequences. escape_peer shows backslashes, control characters
(C0, DEL, C1), line separators and bidi overrides as visible escapes (\\, \n,
\u{1b}), keeping each record on its own attributable line.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-25 23:49:08 +00:00

..

src

#3692: wordcraft-cli zotero escapes peer text on stderr

2026-10-25 23:49:08 +00:00

tests/it

CI: one test binary per crate, nextest, line tables only (#4025)

2026-10-23 14:24:37 -04:00

Cargo.toml

HTML import: bold header cells, cell alignment and the region paper (#1381) (#1494)

2026-10-14 13:58:14 -04:00