 David Blass
|
bc28c658f2
|
harden sandbox escape vectors for bash disabled/restricted modes (#257)
* harden sandbox escape vectors for bash disabled/restricted modes
block git config injection (-c flag as subcommand), dangerous subcommands
(config, submodule, rebase, bisect), code-executing arg flags (--exec,
--extcmd), .gitattributes/.gitmodules writes, and package lifecycle scripts.
add retry logic to test runner for transient failures. add security unit
tests and adhoc attack tests.
Co-authored-by: Cursor <cursoragent@cursor.com>
* only filter subcommands in nobash, remove nobash from ui
* use regex matching
* iterate on tests
* simplify githooks
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-02-11 02:02:41 +00:00 |
|
|
David Blass
|
19df8372cd
|
add file_read/file_write tools, sandbox tests, CI improvements (#239)
* migrate to flags
* init
* iterate on file write lockdown tests
* improve ci
* fix lockfile
* fix typecheck
* fix lint
* improve pushRestricted
* ok
* fix more
* ok
* remove process.env spreading rule
Co-authored-by: Cursor <cursoragent@cursor.com>
* enhanced fs rw tools
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Colin McDonnell <colinmcd94@gmail.com>
|
2026-02-10 06:35:47 +00:00 |
|
|
David Blass
|
9a8db3e07c
|
add restricted tests, refactor test infrastructure (#150)
|
2026-01-22 21:06:19 +00:00 |
|
|
David Blass
|
4e19178c81
|
fix CI (#111)
|
2026-01-20 17:25:06 +00:00 |
|
|
David Blass
|
410b11db71
|
test CI
|
2026-01-16 20:21:54 +00:00 |
|
|
David Blass
|
02a498e0cb
|
update workflows
|
2026-01-16 16:00:27 +00:00 |
|
|
David Blass
|
e4b086938e
|
iterate on CI
|
2026-01-16 15:52:37 +00:00 |
|
|
Mateusz Burzyński
|
332ef73b87
|
Remove invalid working-directory setting (#105)
|
2026-01-16 10:56:28 +00:00 |
|
|
Mateusz Burzyński
|
cd16ba67a6
|
Get rid of incorrect cache-dependency-path in an /action workflow (#104)
|
2026-01-16 10:47:52 +00:00 |
|
|
Anna Bocharova
|
9432a5b737
|
Revert 4c5cf44
|
2026-01-16 11:31:38 +01:00 |
|
|
Anna Bocharova
|
4c5cf444a2
|
Fix cache-dependency-path in test workflow
|
2026-01-16 11:28:45 +01:00 |
|
|
David Blass
|
f34379415e
|
add per-agent smoke tests (#100)
|
2026-01-16 08:00:16 +00:00 |
|
|
Robin Tail
|
c5d201ce60
|
Add CI workflow for testing.
|
2026-01-12 15:10:06 +01:00 |
|