 Colin McDonnell
|
a7bd746f21
|
Restructure dash (#372)
* Restructure dash
* WIP
* WIP
* refactor trigger UI: extract PR summary card, add mentions section, rename labels
Co-authored-by: Cursor <cursoragent@cursor.com>
* clean up console UI: remove info icons from section descriptions, rename mentions trigger
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix review feedback: layout, terminology, form scope
- extract console sidebar sections to module-level constant
- align three-column layout breakpoints to xl (match sidebar visibility)
- fix mixed shell/bash terminology in beta page
- scope FormProvider to trigger sections only, restore autoComplete="off"
Co-authored-by: Cursor <cursoragent@cursor.com>
* Bump
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-02-23 23:34:29 +00:00 |
|
|
David Blass
|
bc28c658f2
|
harden sandbox escape vectors for bash disabled/restricted modes (#257)
* harden sandbox escape vectors for bash disabled/restricted modes
block git config injection (-c flag as subcommand), dangerous subcommands
(config, submodule, rebase, bisect), code-executing arg flags (--exec,
--extcmd), .gitattributes/.gitmodules writes, and package lifecycle scripts.
add retry logic to test runner for transient failures. add security unit
tests and adhoc attack tests.
Co-authored-by: Cursor <cursoragent@cursor.com>
* only filter subcommands in nobash, remove nobash from ui
* use regex matching
* iterate on tests
* simplify githooks
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-02-11 02:02:41 +00:00 |
|