Teknium d3f1987a05 fix(security): add .config/gh to read protection for @file references (#4327) ...

Follow-up to PR #4305 — .config/gh was added to the write-deny list
but missed from _SENSITIVE_HOME_DIRS, leaving GitHub CLI OAuth tokens
exposed via @file:~/.config/gh/hosts.yml context injection.

2026-03-31 12:48:30 -07:00

16 KiB

Raw Blame History

View Raw