fix(extensions): wire up list --available catalog query + harden add --from path traversal - #3051

Closed

darion-yaphet wants to merge 11 commits into

github:mainfrom

darion-yaphet:fix/extension-list-available

Commits on Aug 7, 2026

fix(extensions): close path traversal and make `list --available` query the catalog
darion-yaphet
committed
a774cea
test(extensions): cover list --available catalog query and add --from path traversal
darion-yaphet
committed
593c74e
fix(extensions): escape catalog markup and always render installed section
darion-yaphet
committed
ced753e
fix(extensions): harden catalog-driven commands against malformed entries
darion-yaphet
committed
75c4b67
Prevent catalog path traversal during extension downloads

darion-yaphet
and
OmX
committed
f0d76e0
fix(extensions): coalesce null catalog fields and sanitize download version
darion-yaphet
committed
cd9cfab
fix(extensions): use _catalog_str/_catalog_id for catalog display fallbacks
darion-yaphet
committed
f755e5c
fix(extensions): harden catalog search against malformed fields
darion-yaphet
committed
41fd158
fix(extensions): prevent malformed tag crashes
darion-yaphet
committed
24ee04e
fix(extensions): enforce trusted catalog identity boundaries
darion-yaphet
committed
d48b8cc
fix
darion-yaphet
committed
5826de1