Infra: block additional host exec env keys (#55977)

This commit is contained in:
Jacob Tomlinson
2026-03-27 11:50:37 -07:00
committed by GitHub
parent fdbcfced84
commit 6eb82fba3c
3 changed files with 127 additions and 2 deletions

View File

@@ -18,6 +18,7 @@ enum HostEnvSecurityPolicy {
"ENV",
"GIT_EXTERNAL_DIFF",
"GIT_EXEC_PATH",
"GIT_TEMPLATE_DIR",
"SHELL",
"SHELLOPTS",
"PS4",
@@ -34,7 +35,8 @@ enum HostEnvSecurityPolicy {
"MAVEN_OPTS",
"SBT_OPTS",
"GRADLE_OPTS",
"ANT_OPTS"
"ANT_OPTS",
"AWS_CONFIG_FILE"
]
static let blockedOverrideKeys: Set<String> = [