Frontmatter
| id | 7988 |
| title | Sanitize commander inputs in buildScripts/buildHighlightJs.mjs |
| state | Closed |
| labels | bugai |
| assignees | tobiu |
| createdAt | Dec 2, 2025, 6:42 PM |
| updatedAt | Dec 2, 2025, 7:13 PM |
| githubUrl | https://github.com/neomjs/neo/issues/7988 |
| author | tobiu |
| commentsCount | 1 |
| parentIssue | null |
| subIssues | [] |
| subIssuesCompleted | 0 |
| subIssuesTotal | 0 |
| blockedBy | [] |
| blocking | [] |
| closedAt | Dec 2, 2025, 7:13 PM |
Sanitize commander inputs in buildScripts/buildHighlightJs.mjs
tobiu assigned to @tobiu on Dec 2, 2025, 7:12 PM

tobiu
Dec 2, 2025, 7:13 PM
Input from Gemini Agent:
✦ I reviewed
buildScripts/buildHighlightJs.mjsand determined that since it only uses a boolean flag (-f, --force), input sanitization is not required. I have reverted the unnecessary import.
tobiu closed this issue on Dec 2, 2025, 7:13 PM
The
commanderlibrary does not sanitize inputs by default. This can lead to issues if users provide inputs with quotes. We need to implement asanitizeInputfunction and apply it to theprogramoptions inbuildScripts/buildHighlightJs.mjs.Implementation Details:
sanitizeInputhelper..option().References:
buildScripts/buildHighlightJs.mjs