24145696452
89%

Ran 08 Apr 2026 04:10PM UTC

Jobs 1

Files 24

Run time 1min

Badge

Embed ▾

Committed 08 Apr 2026 04:09PM UTC coverage: 89.612%. Remained the same

Build # 24145696452

Build Type

push

github

Committed by

web-flow

Commit Message

fix: shell-quote arguments in overlay launcher scripts (#58)

* fix: shell-quote arguments in overlay launcher scripts

$* flattened positional args into a single string, breaking paths with
spaces and allowing variable/command injection via $, backticks, and
glob expansion when re-parsed by sh -c.

Extract a shared sq() function (POSIX single-quote wrapping) into
shell-quote.sh, sourced by both launchers. Also fix touch-sentinel
quoting in sh -c and heredoc patterns, replace printf '%q' (bash-
specific) with sq() in the emacs vterm launcher, and use $TMPDIR in
launch-plan-review.sh (matching the earlier macOS sandbox fix).

* fix: address review feedback for launcher argument quoting

Quote --wrap flag consistently, add shellcheck directive to
shell-quote.sh, make inline sq() detection more robust, remove unused
variable, and add test cases for newlines/unicode/consecutive quotes.

* fix: remove test-quoting.sh and its Makefile target

Local validation script shouldn't ship with the plugin.

* fix: inline sq() in launch-revdiff.sh, drop shared shell-quote.sh

Both launchers are now self-contained with no cross-plugin deps.

Coverage Stats

4546 of 5073 relevant lines covered (89.61%)

467.17 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	24145696452.1	08 Apr 2026 04:10PM UTC	24	89.61	GitHub Action Run

umputun / revdiff / 24145696452
89%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 24145696452

umputun / revdiff / 24145696452 89%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 24145696452

umputun / revdiff / 24145696452
89%

README BADGES
x