pelmen/kin
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

kin: KIN-INFRA-006 Исправить command injection через deploy_path в SSH-команде

Browse source
This commit is contained in:
Gros Frumos 2026-03-17 20:17:08 +02:00
parent c20eae01c1
commit d6d6e77744
1 changed files with 7 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
core/db.py
View file

@ -702,6 +702,13 @@ def _migrate(conn: sqlite3.Connection):
conn.execute("ALTER TABLE projects ADD COLUMN test_command TEXT DEFAULT NULL") conn.execute("ALTER TABLE projects ADD COLUMN test_command TEXT DEFAULT NULL")
conn.commit() conn.commit()
# KIN-102: Reset legacy 'make test' default — projects using old schema default get auto-detection.
# Any project with a real Makefile should have test_command set explicitly, not via this default.
conn.execute(
"UPDATE projects SET test_command = NULL WHERE test_command = 'make test'"
)
conn.commit()
# Rename legacy 'auto' → 'auto_complete' (KIN-063) # Rename legacy 'auto' → 'auto_complete' (KIN-063)
conn.execute( conn.execute(
"UPDATE projects SET execution_mode = 'auto_complete' WHERE execution_mode = 'auto'" "UPDATE projects SET execution_mode = 'auto_complete' WHERE execution_mode = 'auto'"