fix(cli): stop leaking API keys to CLI app subprocesses

Browse Source

Installed CLI apps were started with os.environ.copy(), so provider keys
from the parent process were visible to untrusted binaries. Use a minimal
allowlist env matching the shell tool.

Fixes #4783

...

This commit is contained in:

LHMQ878

2026-08-12 02:57:48 +09:00

committed by Xubin Ren

parent ec3dfb21ba

commit a0e60116a3

1 changed files with 1 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files