@bonginkan/maria 1.8.7 → 1.8.8

package/dist/bin/maria.js

@@ -17292,10 +17292,37 @@ BEGIN TEST GENERATION:
           command += " --coverage";
         }
         if (request.target) {
-          command += ` ${request.target}`;
+          const sanitizedTarget = this.sanitizeTarget(request.target);
+          if (sanitizedTarget) {
+            command += ` ${sanitizedTarget}`;
+          }
         }
         return command;
       }
+      /**
+       * Sanitize target parameter to prevent command injection
+       */
+      sanitizeTarget(target) {
+        const safePathPattern = /^[a-zA-Z0-9._/-]+$/;
+        const dangerousChars = /[;&|`$(){}[\]<>'"\\]/;
+        if (!target || target.trim() === "") {
+          return null;
+        }
+        const trimmedTarget = target.trim();
+        if (dangerousChars.test(trimmedTarget)) {
+          logger.warn("Test target contains dangerous characters, ignoring:", trimmedTarget);
+          return null;
+        }
+        if (!safePathPattern.test(trimmedTarget)) {
+          logger.warn("Test target contains invalid characters, ignoring:", trimmedTarget);
+          return null;
+        }
+        if (trimmedTarget.includes("..")) {
+          logger.warn("Test target contains directory traversal, ignoring:", trimmedTarget);
+          return null;
+        }
+        return trimmedTarget;
+      }
       /**
        * Parse test results
        */
@@ -25019,7 +25046,7 @@ function createInteractiveSession(maria) {
             }
           }
           process.stdout.write(TEXT_HIERARCHY.SUBTITLE("\nMARIA: "));
-          process.stdout.write(chalk13__default.default.gray("\u{1F914} Thinking... "));
+          process.stdout.write(chalk13__default.default.gray("\u{1F914} Thinking..."));
           try {
             const stream = maria.chatStream(message);
             process.stdout.write("\r" + TEXT_HIERARCHY.SUBTITLE("MARIA: "));
@@ -28163,7 +28190,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@bonginkan/maria",
-      version: "1.8.7",
+      version: "1.8.8",
       description: "Enterprise-Grade AI Development Platform - Intelligent CLI with Complete Local AI Integration (Ollama + vLLM + LM Studio), 50 Cognitive Modes, Vector-based Code Search, and Comprehensive Quality Analysis",
       keywords: [
         "ai",