fix: replace deno --allow-all with specific permission flags in LSP server

hyperpolymath · claude · hyperpolymath · commit 5eaaeb1b8231 · 2026-03-30T11:12:33.000+01:00
Replaces overly broad --allow-all with --allow-read --allow-env --allow-net.
Detected by panic-attack assail batch scan (2026-03-30).

Co-Authored-By: Claude Opus 4.6 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/cli/lsp-server.ts b/cli/lsp-server.ts
@@ -1,4 +1,4 @@
-#!/usr/bin/env -S deno run --allow-all
+#!/usr/bin/env -S deno run --allow-read --allow-env --allow-net
 // SPDX-License-Identifier: PMPL-1.0-or-later
 // Error-Lang Language Server Protocol (LSP) Implementation
 //

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-#!/usr/bin/env -S deno run --allow-all`
	`1`	`+#!/usr/bin/env -S deno run --allow-read --allow-env --allow-net`
`2`	`2`	`// SPDX-License-Identifier: PMPL-1.0-or-later`
`3`	`3`	`// Error-Lang Language Server Protocol (LSP) Implementation`
`4`	`4`	`//`