tsmx / secure-config / 40958269180

100%

master: 100%

push

github

Harden env var exports and config loading

- Deny dangerous env var names (NODE_OPTIONS, LD_*, PATH, key variable, ...)
  when exporting via __envVarExports in the config file; add envVarDenyList option
- Fix broken typeof check for envVar in exportEnvVars
- Load config via fs.readFileSync + JSON.parse instead of require() to avoid
  a shared, mutated module cache
- Add tests and README documentation

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

67 of 70 branches covered (95.71%)

Branch coverage included in aggregate %.

19 of 20 new or added lines in 1 file covered. (95.0%)

76 of 77 relevant lines covered (98.7%)

451.01 hits per line