jcg.re
1diff --git a/tessen b/tessen
2index 37d2660..375f34f 100755
3--- a/tessen
4+++ b/tessen
5@@ -1,10 +1,13 @@
6-#!/usr/bin/env bash
7+#!/bin/bash
8 # SPDX-License-Identifier: GPL-2.0-only
9 # Copyright (C) 2021-2024 Ayush Agarwal <ayush at ayushnix dot com>
10 #
11 # tessen - a data selection interface for pass and gopass on Wayland
12 # ------------------------------------------------------------------------------
13
14+# set the path explicitly to avoid executing arbitrary user owned binaries
15+export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
16+
17 # don't leak password data if debug mode is enabled
18 set +x
19