David Blass bc28c658f2 harden sandbox escape vectors for bash disabled/restricted modes (#257) ...

* harden sandbox escape vectors for bash disabled/restricted modes

block git config injection (-c flag as subcommand), dangerous subcommands
(config, submodule, rebase, bisect), code-executing arg flags (--exec,
--extcmd), .gitattributes/.gitmodules writes, and package lifecycle scripts.
add retry logic to test runner for transient failures. add security unit
tests and adhoc attack tests.

Co-authored-by: Cursor <cursoragent@cursor.com>

* only filter subcommands in nobash, remove nobash from ui

* use regex matching

* iterate on tests

* simplify githooks

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-02-11 02:02:41 +00:00

..

activity.ts

Scope installation token permissions in restricted mode (#226)

2026-02-06 06:26:26 +00:00

agent.ts

Add upload tool and related APIs (#187)

2026-01-28 05:34:58 +00:00

apiKeys.ts

Add upload tool and related APIs (#187)

2026-01-28 05:34:58 +00:00

body.ts

Add upload tool and related APIs (#187)

2026-01-28 05:34:58 +00:00

buildPullfrogFooter.ts

Tweak comment footer (#208)

2026-02-03 18:49:48 +00:00

cli.ts

Code style (#97)

2026-01-15 22:06:53 +00:00

docker.ts

add file_read/file_write tools, sandbox tests, CI improvements (#239)

2026-02-10 06:35:47 +00:00

errorReport.ts

Add post hooks for cleanup (#193)

2026-01-28 01:59:15 +00:00

exitHandler.ts

feat(action): Update "Leaping" comment when workflow failed or cancelled early (#230)

2026-02-06 18:10:08 +00:00

gitAuth.ts

harden sandbox escape vectors for bash disabled/restricted modes (#257)

2026-02-11 02:02:41 +00:00

github.ts

add lint/format scripts and fix all biome errors (#233)

2026-02-06 07:18:00 +00:00

globals.ts

Update

2026-01-28 07:47:52 +00:00

install.ts

Clean up actions and payloads (#98)

2026-01-16 07:16:25 +00:00

instructions.ts

add file_read/file_write tools, sandbox tests, CI improvements (#239)

2026-02-10 06:35:47 +00:00

lifecycle.ts

feat: Lifecycle hooks (#219)

2026-02-06 07:16:14 +00:00

log.ts

feat(agents): add thinking time logging between tool calls (#244)

2026-02-10 06:17:43 +00:00

normalizeEnv.ts

Scope installation token permissions in restricted mode (#226)

2026-02-06 06:26:26 +00:00

payload.test.ts

Scope installation token permissions in restricted mode (#226)

2026-02-06 06:26:26 +00:00

payload.ts

Scope installation token permissions in restricted mode (#226)

2026-02-06 06:26:26 +00:00

retry.ts

Maybe fix gemini

2025-12-27 16:28:41 -08:00

run.ts

Add set_output tool (#205)

2026-01-29 22:49:00 +00:00

runContext.ts

feat: Lifecycle hooks (#219)

2026-02-06 07:16:14 +00:00

runContextData.ts

Add upload tool and related APIs (#187)

2026-01-28 05:34:58 +00:00

secrets.ts

Scope installation token permissions in restricted mode (#226)

2026-02-06 06:26:26 +00:00

setup.ts

harden sandbox escape vectors for bash disabled/restricted modes (#257)

2026-02-11 02:02:41 +00:00

shell.ts

Scope installation token permissions in restricted mode (#226)

2026-02-06 06:26:26 +00:00

subprocess.ts

improve runtest, optimize CI batching (#210)

2026-02-01 21:48:53 +00:00

time.test.ts

add #timeout, macro errors, refactor tests (#191)

2026-01-28 21:06:57 +00:00

time.ts

migrate to flags (#249)

2026-02-10 05:04:46 +00:00

timer.test.ts

feat(agents): add thinking time logging between tool calls (#244)

2026-02-10 06:17:43 +00:00

timer.ts

make waitlist code field required (#250)

2026-02-10 06:31:31 +00:00

token.ts

Scope installation token permissions in restricted mode (#226)

2026-02-06 06:26:26 +00:00

versioning.test.ts

Add upload tool and related APIs (#187)

2026-01-28 05:34:58 +00:00

versioning.ts

Add upload tool and related APIs (#187)

2026-01-28 05:34:58 +00:00

workflow.ts

Fixed how payload-as-prompt is handled and progress comment updates (#212)

2026-02-01 22:13:39 +00:00

workflowRun.ts

Fixed how payload-as-prompt is handled and progress comment updates (#212)

2026-02-01 22:13:39 +00:00