Security: Remove shell=True to prevent command injection (Fix #261)#293

Open

GaneshPatil7517 wants to merge 2 commits intoControlCore-Project:devfrom

GaneshPatil7517:fix/issue-261-command-injection

Commits on Feb 12, 2026

Security: Fix command injection in /contribute and /library endpoints (Issue #261)
GaneshPatil7517
committed
Address review comments: improve validation and Windows compatibility
GaneshPatil7517
committed