php-uptelligence/Services
Snider ef8a40829f security: fix shell injection in AssetTrackerService
- Add package name validation with strict regex patterns
- Convert all Process::run() calls to array syntax
- Support Composer and NPM package name formats
- Add comprehensive shell injection tests (20 attack patterns)
- Update security docs and changelog

Fixes P2 shell injection vulnerability from security audit.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-29 12:21:07 +00:00
..
AIAnalyzerService.php refactor: move namespace from Core\Uptelligence to Core\Mod\Uptelligence 2026-01-27 16:32:55 +00:00
AssetTrackerService.php security: fix shell injection in AssetTrackerService 2026-01-29 12:21:07 +00:00
DiffAnalyzerService.php refactor: move namespace from Core\Uptelligence to Core\Mod\Uptelligence 2026-01-27 16:32:55 +00:00
IssueGeneratorService.php refactor: move namespace from Core\Uptelligence to Core\Mod\Uptelligence 2026-01-27 16:32:55 +00:00
UpstreamPlanGeneratorService.php refactor: move namespace from Core\Uptelligence to Core\Mod\Uptelligence 2026-01-27 16:32:55 +00:00
UptelligenceDigestService.php refactor: move namespace from Core\Uptelligence to Core\Mod\Uptelligence 2026-01-27 16:32:55 +00:00
VendorStorageService.php refactor: move namespace from Core\Uptelligence to Core\Mod\Uptelligence 2026-01-27 16:32:55 +00:00
VendorUpdateCheckerService.php refactor: move namespace from Core\Uptelligence to Core\Mod\Uptelligence 2026-01-27 16:32:55 +00:00
WebhookReceiverService.php refactor: move namespace from Core\Uptelligence to Core\Mod\Uptelligence 2026-01-27 16:32:55 +00:00