Peter Steinberger
|
daaf211e20
|
fix(node-host): fail closed on unbound interpreter approvals
|
2026-03-11 02:36:38 +00:00 |
|
Peter Steinberger
|
68c674d37c
|
refactor(security): simplify system.run approval model
|
2026-03-11 01:43:06 +00:00 |
|
Peter Steinberger
|
7289c19f1a
|
fix(security): bind system.run approvals to exact argv text
|
2026-03-11 01:25:31 +00:00 |
|
Peter Steinberger
|
cf3a479bd1
|
fix(node-host): bind bun and deno approval scripts
|
2026-03-09 05:59:32 +00:00 |
|
Peter Steinberger
|
c76d29208b
|
fix(node-host): bind approved script operands
|
2026-03-07 23:04:00 +00:00 |
|
Sid
|
c8ebd48e0f
|
fix(node-host): sync rawCommand with hardened argv after executable path pinning (#33137)
Merged via squash.
Prepared head SHA: a7987905f7ad6cf5fee286ffa81ceaad8297174f
Co-authored-by: Sid-Qin <201593046+Sid-Qin@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-03-04 11:30:33 -05:00 |
|
Peter Steinberger
|
dc825e59f5
|
refactor: unify system.run approval cwd revalidation
|
2026-03-02 23:46:54 +00:00 |
|
Peter Steinberger
|
aee27d0e38
|
refactor(security): table-drive wrapper approval pinning tests
|
2026-03-02 17:30:48 +00:00 |
|
Peter Steinberger
|
dded569626
|
fix(security): preserve system.run wrapper approval semantics
|
2026-03-02 17:20:52 +00:00 |
|
Peter Steinberger
|
155118751f
|
refactor!: remove versioned system-run approval contract
|
2026-03-02 01:12:53 +00:00 |
|
Peter Steinberger
|
d82c042b09
|
refactor(node-host): split system.run plan and allowlist internals
|
2026-02-26 22:01:01 +01:00 |
|