I just casually browsed through your repo and noticed there's a potential shell injection here:
https://github.com/PerryTS/dashboard/blob/main/server.ts#L162
If code get's passed in raw, which seems to be the case, it could contain malicious data that ends up in the shell when you execute curl?
Just wanted to leave this here since it's an open repo and you seem to be running this in production.
I just casually browsed through your repo and noticed there's a potential shell injection here:
https://github.com/PerryTS/dashboard/blob/main/server.ts#L162
If
codeget's passed in raw, which seems to be the case, it could contain malicious data that ends up in the shell when you execute curl?Just wanted to leave this here since it's an open repo and you seem to be running this in production.