michaelxer bbca32fea9 fix(security): validate each shell segment against exec.allowPatterns ...

Guard against shell-chain bypass where an attacker appends '&& malicious'
after an allowlisted prefix. The allowlist check now splits the command
on top-level chaining operators (&&, ||, ;, |) and requires every segment
to match at least one allowPattern independently.

Fixes #4521

2026-07-21 13:50:24 +08:00

..

__init__.py

feat(status): add web search provider usage to /status command

2026-04-06 13:37:55 +08:00

test_apply_patch_tool.py

Clarify filesystem workspace write policy

2026-06-18 00:03:26 +08:00

test_edit_advanced.py

test: improve deterministic unit test coverage

2026-06-04 19:41:32 +08:00

test_edit_enhancements.py

test: speed up CI and harden the suite

2026-07-15 00:18:37 +08:00

test_exec_allow_patterns.py

fix(security): validate each shell segment against exec.allowPatterns

2026-07-21 13:50:24 +08:00

test_exec_env.py

feat(exec): add path prepend config

2026-06-10 18:09:57 +08:00

test_exec_platform.py

fix(exec): clean up sessions on shutdown

2026-07-21 13:48:51 +08:00

test_exec_security.py

test: speed up CI and harden the suite

2026-07-15 00:18:37 +08:00

test_exec_session_tools.py

fix(exec): clean up sessions on shutdown

2026-07-21 13:48:51 +08:00

test_file_edit_coding_enhancements.py

fix(tools): enforce edit_file line hints

2026-07-11 01:14:50 +08:00

test_filesystem_tools.py

refactor(agent): gate sustained goals behind explicit /goal

2026-07-12 00:35:17 +08:00

test_image_generation_tool.py

fix(providers): honor Codex proxy config consistently

2026-07-15 20:01:48 +08:00

test_mcp_probe.py

test: speed up CI and harden the suite

2026-07-15 00:18:37 +08:00

test_mcp_tool.py

fix: preserve real cancellation in MCP paths

2026-07-18 17:36:35 +08:00

test_message_tool_suppress.py

refactor(agent): capture runtime at turn admission

2026-07-10 17:54:34 +08:00

test_message_tool.py

refactor(agent): unify request context routing

2026-07-10 17:54:34 +08:00

test_read_enhancements.py

feat(webui): add guided setup flows

2026-07-13 13:11:46 +08:00

test_sandbox.py

test(exec): cover bwrap sandbox mounts

2026-06-30 22:34:43 +08:00

test_search_tools.py

refactor(agent): capture subagent runtime before spawn

2026-07-10 17:54:34 +08:00

test_shell_reap.py

fix(exec): clean up sessions on shutdown

2026-07-21 13:48:51 +08:00

test_tool_descriptions.py

docs: clarify exec shell override guidance

2026-07-06 12:11:25 +08:00

test_tool_loader.py

fix(exec): isolate exec session managers

2026-07-18 17:35:56 +08:00

test_tool_registry.py

refactor(tools): use structured tool error results

2026-07-01 13:03:47 +08:00

test_tool_validation.py

fix(tools): reject unknown builtin parameters

2026-06-21 15:22:09 +08:00

test_web_fetch_security.py

test: speed up CI and harden the suite

2026-07-15 00:18:37 +08:00

test_web_fetch_url_sanitization.py

test: speed up CI and harden the suite

2026-07-15 00:18:37 +08:00

test_web_search_tool.py

fix(web-search): return structured Serper errors

2026-07-06 12:11:31 +08:00