2 Commits

Author	SHA1	Message	Date
Vincent Koc	99170e2408	Hardening: normalize Unicode command obfuscation detection (#44091) ... * Exec: cover unicode obfuscation cases * Exec: normalize unicode obfuscation detection * Changelog: note exec detection hardening * Exec: strip unicode tag character obfuscation * Exec: harden unicode suppression and length guards * Exec: require path boundaries for safe URL suppressions	2026-03-12 10:57:49 -04:00
Vincent Koc	0e28e50b45	fix(security): detect obfuscated commands that bypass allowlist filters (#24287) ... * security(exec): add obfuscated command detector * test(exec): cover obfuscation detector patterns * security(exec): enforce obfuscation approval on gateway host * security(exec): enforce obfuscation approval on node host * test(exec): prevent obfuscation timeout bypass * chore(changelog): credit obfuscation security fix	2026-02-23 02:50:06 -05:00