- Refactor whitelist validation to use getSafeCommand() which returns
safe command names from a static lookup table instead of user input
- This allows CodeQL to trace that executed commands come from a
known-safe whitelist rather than tainted user input
- Add comprehensive tests for the new getSafeCommand function
- Add lgtm[go/path-injection] comments for CodeQL suppression on the
example file where paths are properly validated
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Thanks for wanting to help out with testing/developing Wails v3! This guide will help you get started.
Getting Started
All the instructions for getting started are in the v3 documentation directory: mkdocs-website.
Please read the README.md file in that directory for more information.