dar-backup 2.0 Beta (v0.8.2) – security hardening (input sanitizer)

[per2jensen]

This release is a feature improvement in the security department :-)

• Security hardening: CommandRunner now performs strict command-line sanitization

  • Disallows potentially dangerous characters (e.g. ;, &, |) in command arguments
  • Prevents injection-style misuse when restoring specific files or invoking custom commands

• Documentation:

  • New README section explains filename restrictions and safe workarounds (e.g. restoring directly with dar, if needed)
  • Includes a Markdown table listing all disallowed characters

• Test suite:

  • Existing test cases updated to comply with the new sanitization rules
  • Additional tests ensure CommandRunner handles large binary output and edge cases cleanly

🔐 GPG Signature Verification
Instructions for verifying release files using the provided GPG signatures are available in the documentation.

---

This discussion was created from the release dar-backup 2.0 Beta (v0.8.2) – security hardening (input sanitizer).