4 Commits

Author	SHA1	Message	Date
David Blass	bc28c658f2	harden sandbox escape vectors for bash disabled/restricted modes (#257) ... * harden sandbox escape vectors for bash disabled/restricted modes block git config injection (-c flag as subcommand), dangerous subcommands (config, submodule, rebase, bisect), code-executing arg flags (--exec, --extcmd), .gitattributes/.gitmodules writes, and package lifecycle scripts. add retry logic to test runner for transient failures. add security unit tests and adhoc attack tests. Co-authored-by: Cursor <cursoragent@cursor.com> * only filter subcommands in nobash, remove nobash from ui * use regex matching * iterate on tests * simplify githooks --------- Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-11 02:02:41 +00:00
Mateusz Burzyński	071e885d63	Add upload tool and related APIs (#187) ... * Add utils for r2 upload * Add the tool and new routes * fix auth issue * sign headers * add comment * use our own API key to auth signed uploads * Restructure things slightly * tweak * tweak * add comments * tweak * revert a thing * twaek * drop mime type filtering * new incarnation of mime type filtering * jsut allow all octet-streams * simplify further * tweak * update lockfile --------- Co-authored-by: Colin McDonnell <colinmcd94@gmail.com>	2026-01-28 05:34:58 +00:00
Colin McDonnell	9e019d89d2	Clean up actions and payloads (#98) ... * Clean up actions and payloads * Clean up action * Cleanup	2026-01-16 07:16:25 +00:00
David Blass	5034ff8285	switch to start_dependency_installation and await_dependency_installation, fix action play.ts repo	2025-12-19 16:29:46 -05:00