fix(search): use fixed-string matching to prevent ReDoS

Add -F flag to git grep to disable regex interpretation, preventing catastrophic backtracking from malicious query patterns.
2026-06-10 18:32:10 +08:00
parent c9c1a739fd
commit c3017a255f
1 changed files with 2 additions and 1 deletions
@@ -25,7 +25,8 @@ impl GitBare {
            "--git-dir".to_string(),
            self.bare_dir.to_string_lossy().into_owned(),
            "grep".to_string(),
-            "-I".to_string(), // don't match binary files
+            "-F".to_string(),
+            "-I".to_string(),
            "--line-number".to_string(),
            "--column".to_string(),
        ];