Commit Graph
2 Commits
Author SHA1 Message Date
TheWitness eb4ca6b53e fix(security): clear quote-empty flag on single-quote content; cover new parser branches
The stack-based substitute_script_path() rewrite left quoteEmpty set while emitting literal content inside a single-quoted region, so a template like '\<field>' wrongly took the exact-wrap branch and dropped the backslash (ScriptSubstitutionMatrix 'shell 56'). Clear the frame's quoteEmpty whenever a single-quoted character is emitted, matching the pre-rewrite fallthrough.

ScriptSubstitutionMatrix.php: add 8 explicit parser cases exercising the \/backtick nested contexts and escaped \$ / backtick pairing so every rewritten line is covered by the changed-coverage probe (1285 -> 1293).
2026-10-12 08:38:10 -04:00
Thomas Vincent 0d04c74660 test(security): cover changed guards and gate PR coverage
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
2026-10-12 09:07:55 +00:00