Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update commandsAndMenu.tsx to replace "`" in file path for Open Git R…
…epository since it leads to Command Injection Vulnerability (#1196) When a repo is created with the backtick character around it and Initialized as a repo and then opened in Terminal, the linux command is resolved or executed on a running instance. For example if a folder with the name "whoami" is created, initialized as a repo and then opened in terminal using 'Open Git repository in Terminal' you will see that whoami is resolved to the current user which is a vector of command injection.
- Loading branch information