Sid
|
c8ebd48e0f
|
fix(node-host): sync rawCommand with hardened argv after executable path pinning (#33137)
Merged via squash.
Prepared head SHA: a7987905f7ad6cf5fee286ffa81ceaad8297174f
Co-authored-by: Sid-Qin <201593046+Sid-Qin@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-03-04 11:30:33 -05:00 |
|
Peter Steinberger
|
dc825e59f5
|
refactor: unify system.run approval cwd revalidation
|
2026-03-02 23:46:54 +00:00 |
|
Peter Steinberger
|
aee27d0e38
|
refactor(security): table-drive wrapper approval pinning tests
|
2026-03-02 17:30:48 +00:00 |
|
Peter Steinberger
|
dded569626
|
fix(security): preserve system.run wrapper approval semantics
|
2026-03-02 17:20:52 +00:00 |
|
Peter Steinberger
|
155118751f
|
refactor!: remove versioned system-run approval contract
|
2026-03-02 01:12:53 +00:00 |
|
Peter Steinberger
|
d82c042b09
|
refactor(node-host): split system.run plan and allowlist internals
|
2026-02-26 22:01:01 +01:00 |
|