fusion44 4355c8eabd fix(lightning): prevent shell injection in CLN local calls ... Two authenticated code paths interpolated user-controlled input into a shell command: - decode_pay_request passed the bolt11 string into _make_local_call, which ran it via create_subprocess_shell; a crafted /lightning/ decode-pay-req request could execute arbitrary commands. Switch _make_local_call to create_subprocess_exec with a discrete argv list. - blitz_cln_unlock interpolated the wallet password into a cl.hsmtool.sh invocation run through a shell, and logged it in the clear. shlex.quote the interpolated values and mark the call sensitive=True. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-03 19:58:41 +02:00
..
protos	chore: update deps and flake file	2024-12-16 15:20:46 +01:00
specializations	fix(lightning): prevent shell injection in CLN local calls	2026-07-03 19:58:41 +02:00
__init__.py	refactor: switch to domain driven directory layout	2022-10-03 20:22:00 +02:00
cln_grpc.py	fix(lightning): prevent shell injection in CLN local calls	2026-07-03 19:58:41 +02:00
cln_jrpc.py	feat: make config loading more flexible	2025-03-23 17:43:39 +01:00
cln_utils.py	feat: implement Ruff as a linter; fix given errors	2023-06-25 07:17:00 +02:00
ln_base.py	refactor: switch to domain driven directory layout	2022-10-03 20:22:00 +02:00
lnd_grpc.py	chore: clean up imports; add better LND error logging	2026-02-03 11:05:19 +01:00