chengyongru c5e053f83b fix: pin validated DNS for SSRF-safe fetches ...

maintainer edit: keep MCP HTTP SSRF checks strict, pin validated DNS for direct web_fetch and HTTP/SSE MCP requests, preserve explicit and environment proxy compatibility, and cover the proxy/redirect/rebinding cases with tests.

2026-07-07 15:40:53 +08:00

..

__init__.py

feat(status): add web search provider usage to /status command

2026-04-06 13:37:55 +08:00

test_apply_patch_tool.py

Clarify filesystem workspace write policy

2026-06-18 00:03:26 +08:00

test_edit_advanced.py

test: improve deterministic unit test coverage

2026-06-04 19:41:32 +08:00

test_edit_enhancements.py

feat(tools): optimize coding workflows

2026-05-20 23:08:21 +08:00

test_exec_allow_patterns.py

fix(exec): remove ad-hoc shell comment stripping from _guard_command

2026-06-27 11:11:46 +08:00

test_exec_env.py

feat(exec): add path prepend config

2026-06-10 18:09:57 +08:00

test_exec_platform.py

fix: harden Windows exec shell edge cases

2026-07-06 12:11:25 +08:00

test_exec_security.py

fix: allow git commands in workspace subdirectories

2026-06-18 00:02:58 +08:00

test_exec_session_tools.py

fix(exec): return early when session command exits

2026-07-02 14:36:06 +08:00

test_file_edit_coding_enhancements.py

feat(tools): optimize coding workflows

2026-05-20 23:08:21 +08:00

test_filesystem_tools.py

fix: resolve builtin skill reads

2026-07-06 12:11:20 +08:00

test_image_generation_tool.py

test(image-generation): tighten zhipu provider coverage

2026-05-23 17:06:36 +08:00

test_mcp_probe.py

fix: pin validated DNS for SSRF-safe fetches

2026-07-07 15:40:53 +08:00

test_mcp_tool.py

fix: pin validated DNS for SSRF-safe fetches

2026-07-07 15:40:53 +08:00

test_message_tool_suppress.py

feat(tools): introduce plugin-based tool discovery and runtime context protocol

2026-05-12 11:28:20 +08:00

test_message_tool.py

fix(heartbeat): skip when HEARTBEAT.md has no tasks and fail closed on delivery (#4111)

2026-05-31 15:15:37 +08:00

test_read_enhancements.py

fix(tools): scope file state by session

2026-05-01 19:15:07 +08:00

test_sandbox.py

test(exec): cover bwrap sandbox mounts

2026-06-30 22:34:43 +08:00

test_search_tools.py

feat(tools): improve coding workflow recovery

2026-05-21 00:58:05 +08:00

test_tool_descriptions.py

docs: clarify exec shell override guidance

2026-07-06 12:11:25 +08:00

test_tool_loader.py

Break tool config schema import cycle

2026-06-13 21:59:07 +08:00

test_tool_registry.py

refactor(tools): use structured tool error results

2026-07-01 13:03:47 +08:00

test_tool_validation.py

fix(tools): reject unknown builtin parameters

2026-06-21 15:22:09 +08:00

test_web_fetch_security.py

fix: pin validated DNS for SSRF-safe fetches

2026-07-07 15:40:53 +08:00

test_web_fetch_url_sanitization.py

fix(tools): tighten web fetch URL cleaning

2026-05-01 19:58:19 +08:00

test_web_search_tool.py

fix(web-search): return structured Serper errors

2026-07-06 12:11:31 +08:00