6607changchun b73317c217 fix(sandbox): support Windows drive-letter bind sources ...

Accept drive-absolute Windows sandbox Docker bind sources in config and runtime validation while keeping blocked-path and allowed-root comparisons case-insensitive for Windows drive paths.

Also remove a stale WhatsApp setup import that blocked extension lint after the rebase.

Co-authored-by: 6607changchun <84566142+6607changchun@users.noreply.github.com>
Co-authored-by: Brad Groux <3053586+BradGroux@users.noreply.github.com>
(cherry picked from commit d02fbc6116)

2026-05-05 05:45:56 +01:00

..

audit-channel-account-metadata.test.ts

…

audit-channel-dm-policy.test.ts

fix(security): tighten telegram dm audit coverage

2026-04-29 02:04:20 +01:00

audit-channel-readonly-resolution.test.ts

…

audit-channel-readonly-setup-fallback.test.ts

fix: simplify bundled runtime dependency repair (#75183)

2026-05-01 07:49:02 +00:00

audit-channel-source-config-discord.test.ts

…

audit-channel-source-config-slack.test.ts

…

audit-channel-test-helpers.ts

…

audit-channel.collect.runtime.ts

…

audit-channel.ts

fix(security): tighten telegram dm audit coverage

2026-04-29 02:04:20 +01:00

audit-config-basics.test.ts

…

audit-config-include-perms.test.ts

test: speed up focused test setup

2026-04-27 13:00:43 +01:00

audit-config-symlink.test.ts

…

audit-deep-code-safety.ts

…

audit-deep-probe-findings.ts

…

audit-exec-safe-bins.test.ts

…

audit-exec-sandbox-host.test.ts

…

audit-exec-surface.test.ts

…

audit-extra.async.test.ts

fix(security): ignore plugin install debris in audits

2026-05-02 13:12:28 +01:00

audit-extra.async.ts

fix(security): ignore plugin install debris in audits

2026-05-02 13:12:28 +01:00

audit-extra.summary.ts

fix(security): resolve model aliases before audit classification (#74532)

2026-04-29 19:26:02 +01:00

audit-extra.sync.test.ts

fix(security): remediate CodeQL alerts

2026-04-30 00:12:50 -07:00

audit-extra.sync.ts

fix(file-transfer): require canonical node policy authorization (#74742)

2026-04-30 04:03:40 +00:00

audit-filesystem-windows.test.ts

…

audit-fs.ts

…

audit-gateway-auth-selection.test.ts

…

audit-gateway-config.ts

fix(gateway): allow explicit loopback trusted proxy auth

2026-04-27 22:01:06 -07:00

audit-gateway-exposure.test.ts

fix(gateway): allow explicit loopback trusted proxy auth

2026-04-27 22:01:06 -07:00

audit-gateway-http-auth.test.ts

…

audit-gateway-tools-http.test.ts

…

audit-gateway.test.ts

…

audit-hooks-routing.test.ts

…

audit-loopback-logging.test.ts

…

audit-model-hygiene.test.ts

fix(security): resolve model aliases before audit classification (#74532)

2026-04-29 19:26:02 +01:00

audit-model-refs.ts

fix(security): resolve model aliases before audit classification (#74532)

2026-04-29 19:26:02 +01:00

audit-node-command-findings.test.ts

fix(security): include dangerous commands in audit known commands (#73915)

2026-04-28 18:34:55 -07:00

audit-plugin-code-safety.test.ts

…

audit-plugin-readonly-scope.test.ts

fix(security): keep plain audit off plugin runtimes

2026-05-01 08:22:06 -07:00

audit-plugins-trust.test.ts

Add Codex happy path prompt snapshots (#75807)

2026-05-03 00:59:55 +09:00

audit-plugins-trust.ts

fix(security): ignore plugin install debris in audits

2026-05-02 13:12:28 +01:00

audit-probe-failure.test.ts

…

audit-sandbox-browser.test.ts

…

audit-sandbox-docker-config.test.ts

fix(sandbox): support Windows drive-letter bind sources

2026-05-05 05:45:56 +01:00

audit-small-model-risk.test.ts

fix(security): resolve model aliases before audit classification (#74532)

2026-04-29 19:26:02 +01:00

audit-summary.test.ts

…

audit-synced-folder.test.ts

…

audit-tool-policy.ts

…

audit-trust-model.test.ts

…

audit-workspace-skill-escape.test.ts

…

audit-workspace-skills.ts

…

audit.deep.runtime.ts

…

audit.nondeep.runtime.ts

…

audit.runtime.ts

…

audit.ts

refactor: route inline eval through command analysis

2026-05-03 18:06:10 +01:00

audit.types.ts

…

channel-metadata.ts

…

config-regex.ts

…

context-visibility.test.ts

…

context-visibility.ts

…

core-dangerous-config-flags.ts

…

dangerous-config-flags-core.ts

test: move pure hotspots to fast lane

2026-04-28 07:56:40 +01:00

dangerous-config-flags.test.ts

test: move pure hotspots to fast lane

2026-04-28 07:56:40 +01:00

dangerous-config-flags.ts

refactor: simplify plugin cache boundaries

2026-04-29 04:33:15 +01:00

dangerous-tools.ts

…

dm-policy-shared.test.ts

fix: align open DM allowlist policy (#74112)

2026-04-29 06:52:12 +01:00

dm-policy-shared.ts

fix: align open DM allowlist policy (#74112)

2026-04-29 06:52:12 +01:00

external-content-source.ts

…

external-content.test.ts

…

external-content.ts

…

fix.test.ts

…

fix.ts

refactor(config): migrate plugin config access

2026-04-27 12:35:58 +01:00

installed-plugin-dirs.ts

fix(security): ignore plugin install debris in audits

2026-05-02 13:12:28 +01:00

safe-regex.test.ts

fix(logging): redact persisted transcript text

2026-04-26 12:12:44 -07:00

safe-regex.ts

fix(logging): redact persisted transcript text

2026-04-26 12:12:44 -07:00

scan-paths.test.ts

…

scan-paths.ts

…

secret-equal.ts

fix(security): remediate CodeQL alerts

2026-04-30 00:12:50 -07:00

skill-scanner.test.ts

fix(security): ignore scanner comment context

2026-05-04 02:35:43 -07:00

skill-scanner.ts

fix(security): ignore scanner comment context

2026-05-04 02:35:43 -07:00

test-temp-cases.ts

…

windows-acl.test.ts

fix(security): block workspace env from overriding Windows system root paths [AI] (#74458)

2026-05-04 10:13:50 -06:00

windows-acl.ts

fix(security): block workspace env from overriding Windows system root paths [AI] (#74458)

2026-05-04 10:13:50 -06:00