[Suneha Bose (bosesuneha)]

Summary

• Accept only service ports from 1 to 65535
• Stop before terminal creation for invalid cluster output
• Add command injection regression tests

Testing

• npm test
• npm run webpack

[Tatsat (Tats) Mishra 🐉 (Tatsinnit)]

Thank you for tightening this security boundary and for adding focused regression coverage. I took a pass through the parsing and port-forward flow, and the cluster-supplied value is now normalized and range-checked before it can reach the terminal command. The tests and CI look good to me. Nice, focused fix!