Ryan Hughes
eb988b42e6
A free-form shell-string --exec sitting next to the safe --exec-arg is a standing invitation for the next caller to interpolate untrusted data and reintroduce the RCE. Remove it: omarchy-notification-send --exec now errors and points at --exec-arg, and the shell drops the omarchy-exec string hint and its bash -lc execution path, leaving only the argv path. Migrate the remaining string callers (the first-run invitation hooks, wifi and welcome prompts) to --exec-arg, and update their notification mocks. Trim the verbose security comments added along the way.
6 lines
278 B
Bash
6 lines
278 B
Bash
# Real newlines, not a literal \n: the card renders the body as it arrives, and
|
|
# elides past three lines.
|
|
omarchy-notification-send -u critical -g "Learn Keybindings" \
|
|
$'Super + K for cheatsheet.\nSuper + Space for Omarchy Menu.' \
|
|
--exec-arg omarchy-menu-keybindings
|