Roo-Code/src/core/config
Jack Pippett 4016f41c65 fix: shell meta-interpretation and API key exposure
- Change ExecaTerminalProcess shell option from true to false so execa
  parses the command without invoking a shell, preventing shell
  metacharacter interpretation.
- Redact secret API keys in getStateToPostToWebview() before serializing
  state to the webview renderer.
- Preserve existing secret values in ProviderSettingsManager.saveConfig()
  when the webview round-trips the '__ROO_REDACTED__' sentinel.
2026-04-28 12:36:37 -07:00
..
__tests__ Reapply Batches 3-4: Skills, browser removal, provider removals (6 major-conflict cherry-picks) (#11475) 2026-02-14 22:06:24 -07:00
ContextProxy.ts Reapply Batches 3-4: Skills, browser removal, provider removals (6 major-conflict cherry-picks) (#11475) 2026-02-14 22:06:24 -07:00
CustomModesManager.ts feat: auto-switch to imported mode with architect fallback (#9003) 2025-11-06 16:40:27 -05:00
importExport.ts fix: auto-migrate v1 condensing prompt and handle invalid providers on import (#10931) 2026-01-23 22:32:04 -05:00
ProviderSettingsManager.ts fix: shell meta-interpretation and API key exposure 2026-04-28 12:36:37 -07:00