fix(review): neutralise log markers, flag command substitution - #26

Merged

zfarrell merged 6 commits into

mainfrom

fix/log-marker-injection-and-subst-flag

Aug 5, 2026

Commits on Aug 5, 2026

fix(review): neutralise Actions log markers in untrusted text
zfarrell
committed
f012bb3
feat(review): flag command substitution in the tool usage artifact
zfarrell
committed
fd8df04
fix(review): neutralise the ##[ marker form anywhere in a line
zfarrell
committed
e217f90
fix(review): sanitise before the byte caps, not after
zfarrell
committed
0fc192c
fix(review): cap the PR description so it cannot evict the diff
zfarrell
committed
251a000
fix(review): remove a live log marker from the prompt document
zfarrell
committed
aa6553a