Agent test 2 - #1

- Added input sanitization to remove shell metacharacters
- Sanitized param removes dangerous characters: ; & | ` $ ( ) \ < > \n \r
- Prevents command injection attacks via HTTP headers
- Fixes CWE-78 vulnerability

- Removed shell interpretation by avoiding sh -c and cmd.exe /c patterns
- Pass echo command and arguments separately to ProcessBuilder
- Added input sanitization to remove special shell characters
- Only allows alphanumeric characters and whitespace in user input
- Prevents CWE-78 Command Injection attacks

- Added sanitizeInput method to remove dangerous characters that could be used for command injection
- Changed command construction to pass sanitized input as a separate argument instead of concatenating with the command string
- This prevents shell command injection by ensuring user input cannot contain shell metacharacters like &, |, ;, $, >, <, \, !
- Sanitization allows only alphanumeric characters, spaces, dots, hyphens, and underscores

- Changed from string concatenation to array-based Runtime.exec() call
- This prevents shell interpretation of special characters in user input
- Input from HTTP header is now properly isolated as a separate argument
- Fixes CWE-78: OS Command Injection vulnerability

Added input sanitization to prevent command injection attacks by:
- Filtering out special characters that could be used for command injection
- Only allowing alphanumeric characters, spaces, dots, hyphens, and underscores
- Applied sanitization before the user input is passed to Runtime.exec()

This addresses CWE-78 (OS Command Injection) vulnerability.

- Added input sanitization to prevent command injection attacks
- Applied whitelist regex to only allow alphanumeric characters, spaces, dots, hyphens, and underscores
- This prevents malicious shell metacharacters from being injected into the command
- Fixes CWE-78: Command Injection vulnerability at line 64

- Added input sanitization to prevent command injection attacks
- Sanitize bar variable by removing special characters that could be used for command injection
- Only allow alphanumeric characters, spaces, dots, hyphens, and underscores
- Fixes CWE-78 vulnerability at line 83