Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: mattn/go-shellwords
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.0.12
Choose a base ref
...
head repository: mattn/go-shellwords
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.0.13
Choose a head ref
  • 9 commits
  • 7 files changed
  • 3 contributors

Commits on Nov 29, 2022

  1. parse \t as TAB, not escaped t 

    Signed-off-by: Nicolas De Loof <[email protected]>
    @ndeloof
    ndeloof committed Nov 29, 2022
    Configuration menu
    Copy the full SHA
    f6737fe View commit details
    Browse the repository at this point in the history

Commits on Dec 23, 2022

  1. Merge pull request #53 from ndeloof/master 

    parse `\t` as TAB, not escaped `t`
    @mattn
    mattn authored Dec 23, 2022
    Configuration menu
    Copy the full SHA
    f3bbb6f View commit details
    Browse the repository at this point in the history

Commits on Apr 13, 2026

  1. Update CI: Go 1.25/1.26 and latest GitHub Actions 

    macos-latest now uses ARM64 which has no Go 1.14/1.15 binaries.
Also update checkout, setup-go, and codecov actions to latest.
    @mattn
    mattn committed Apr 13, 2026
    Configuration menu
    Copy the full SHA
    551a1d0 View commit details
    Browse the repository at this point in the history

  2. Fix dollarQuote state management in shellwords.go 

    Updated dollarQuote handling to prevent toggling on bare ')' characters.
    @scumfrog
    scumfrog committed Apr 13, 2026
    Configuration menu
    Copy the full SHA
    e2951fc View commit details
    Browse the repository at this point in the history

  3. Implement tests for shellwords parser functionality 

    Add tests for shellwords parser handling of unmatched and bare closing parentheses, command substitutions, and error cases.
    @scumfrog
    scumfrog committed Apr 13, 2026
    Configuration menu
    Copy the full SHA
    735b5e8 View commit details
    Browse the repository at this point in the history

  4. fix: preserve parser compatibility for unmatched ')' handling

    @scumfrog
    scumfrog committed Apr 13, 2026
    Configuration menu
    Copy the full SHA
    b074fa0 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #60 from scumfrog/security-fix-cve 

    fix(parser): prevent unintended command execution via unmatched ')'
    @mattn
    mattn authored Apr 13, 2026
    Configuration menu
    Copy the full SHA
    9a78803 View commit details
    Browse the repository at this point in the history

  6. Treat bare ')' as syntax error regardless of ParseBacktick 

    The merged security fix (#60) treated bare ')' as a literal when
ParseBacktick=false, but as an error when ParseBacktick=true.
Unify the behavior: bare ')' is always a syntax error, consistent
with how bare '(' is already handled.
    @mattn
    mattn committed Apr 13, 2026
    Configuration menu
    Copy the full SHA
    e73986e View commit details
    Browse the repository at this point in the history

  7. Run gofmt: add missing //go:build directives and trailing newlines

    @mattn
    mattn committed Apr 13, 2026
    Configuration menu
    Copy the full SHA
    fd1aa6c View commit details
    Browse the repository at this point in the history
Loading