better transport argument sanitization#1032

Merged

Byron merged 3 commits intomainfrom fix-exploit

Sep 24, 2023

+146-16

Commits on Sep 24, 2023

feat: add Url::host_argument_safe() and Url::path_argument_safe()
Byron
committed
fix: prevent hosts or paths that look like arguments to be passed to invoked commands.
Byron
committed
improve journey test to validate handling ambiguous of ssh-hosts
Byron
committed