refactor: escape `--host` in spark serve to prevent CLI command injection#10156

Open

sgInnora wants to merge 2 commits intocodeigniter4:developfrom

sgInnora:security/escape-spark-serve-host

Commits on May 4, 2026

security: escape $host in spark serve to prevent CLI command injection
sgInnora
committed
refactor: combine host:port into a single escapeshellarg() and add ServeTest
sgInnora
committed