mirror of
https://github.com/angular/angular
synced 2026-05-24 09:28:37 +00:00
Currently, the exec() utility uses childProcess.spawn() with shell: true. This commit changes the spawn option to shell: false to prevent OS command injection vulnerabilities and quotes the benchmark target in the github action. |
||
|---|---|---|
| .. | ||
| benchmarks | ||
| build | ||
| ci | ||
| test | ||
| compare-main-to-patch.js | ||
| diff-release-package.mts | ||
| tsconfig.json | ||