Files
simplex-chat/scripts
spacedandy-agents-simplex 5f6030568e ci: the desktop ui helper presses one key per xdotool call and checks its coordinates, so no argument can run another command
xdotool key reads a later argument that names one of its commands, exec among them, as that command, and mousemove takes a single word, so "ui key Return exec <program>" or "ui click restore exec ..." ran a program on the runner. The Claude session on the runner is limited to ui commands, and a program could read its token. Key names and numbers are now checked, and keys are pressed one per call.

Review: R1-D1, R1-D2
2026-10-21 11:58:27 +00:00
..
2026-10-19 16:03:47 +01:00
2026-05-23 08:57:44 +01:00
2026-10-19 13:25:55 +01:00