Tibsfox 22fe139e7b fix(milestone): escape reqId in regex patterns to prevent injection ...

cmdRequirementsMarkComplete interpolates user-supplied reqId strings
directly into RegExp constructors. If a reqId contains regex
metacharacters (e.g. parentheses, brackets, dots), the patterns break
or match unintended content.

Import escapeRegex from core.cjs (already used in state.cjs and
phase.cjs) and apply it to reqId before interpolation into all four
regex patterns in the function.

Same class of fix as gsd-build/get-shit-done#741 (state.cjs).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-03 08:01:54 -06:00

..

bin

fix(milestone): escape reqId in regex patterns to prevent injection

2026-03-03 08:01:54 -06:00

references

fix(workflows): break freeform answer loop in AskUserQuestion

2026-03-03 08:01:54 -06:00

templates

feat: code-aware discuss phase with codebase scouting (#727)

2026-02-27 12:59:15 -06:00

workflows

fix(workflows): standardize agent spawn types across all workflows

2026-03-03 08:01:54 -06:00