Pavan Kumar Gondhi 9ac4272b35 fix: harden safe-bin argument validation [AI] (#80999) ...

* fix: reject shell expansion in safe-bin tokens

* fix: complete safe-bin shell payload handling

* addressing codex review

* addressing ci

* addressing ci

* addressing codex review

* docs: add changelog entry for PR merge

2026-05-12 20:37:58 +05:30

..

config.ts

[codex] Extract filesystem safety primitives (#77918)

2026-05-06 02:15:17 +01:00

exec-policy.test.ts

fix(security): broaden shell-wrapper detection and block env-argv assignment injection [AI-assisted] (#65717)

2026-04-13 11:48:42 +05:30

exec-policy.ts

refactor: trim node host exports

2026-05-02 00:24:11 +01:00

invoke-system-run-allowlist.ts

fix: harden safe-bin argument validation [AI] (#80999)

2026-05-12 20:37:58 +05:30

invoke-system-run-plan.test.ts

test: tighten system run sha assertions

2026-05-09 07:01:59 +01:00

invoke-system-run-plan.ts

Harden macOS shell wrapper allowlist parsing [AI] (#78518)

2026-05-08 10:18:41 +05:30

invoke-system-run.test.ts

fix: harden safe-bin argument validation [AI] (#80999)

2026-05-12 20:37:58 +05:30

invoke-system-run.ts

fix: harden safe-bin argument validation [AI] (#80999)

2026-05-12 20:37:58 +05:30

invoke-types.ts

…

invoke.sanitize-env.test.ts

fix(process): decode Windows command output with console codepage awareness (#72393)

2026-04-26 23:10:59 -07:00

invoke.ts

refactor: trim node host exports

2026-05-02 00:24:11 +01:00

plugin-node-host.test.ts

…

plugin-node-host.ts

…

runner.credentials.test.ts

fix(node-runtime): keep node-host recovering after gateway restarts

2026-04-26 07:49:45 +01:00

runner.test.ts

test: tighten node-host runner assertion

2026-05-09 12:09:56 +01:00

runner.ts

refactor: trim node host exports

2026-05-02 00:24:11 +01:00

with-timeout.ts

…