security: harden user-input attack surface (#50-#59)#41

Merged

jkyberneees merged 20 commits into

mainfrom

fix/sec-findings-remaining

Jun 17, 2026

Commits on Jun 15, 2026

fix(sec): scope audit ingest recorder to run context (#20)
jkyberneees
committed

Commits on Jun 16, 2026

Commits on Jun 17, 2026

fix(sec): confine glob/search_files patterns to workspace (#22)
jkyberneees
committed
fix(sec): nonce sub-agent untrusted-input fence (#24)
jkyberneees
committed
fix(sec): reject symlinks in sandbox --ctx injection (#25)
jkyberneees
committed
fix(sec): allowlist sandbox network modes (#26)
jkyberneees
committed
fix(sec): FD-based API key handoff for Telegram restart child (#28)
jkyberneees
committed
fix(sec): harden Telegram document filename sanitization (#30)
jkyberneees
committed
Fix #31: decline auto-save of tainted skills; require --force to promote
jkyberneees
committed
Fix #34: escalate interpreters that can invoke shell commands to code_execution
jkyberneees
committed
Fix #37: cap MCP server stdout line size to prevent OOM
jkyberneees
committed
security: harden MCP tools/list metadata trust (#38)
jkyberneees
committed
security: cap file sizes in read-only perf tools and inline inputs (#39, #40)
jkyberneees
committed
test+docs: increase coverage of size-cap changes and keep docs consistent
jkyberneees
committed
security: fix schedule locking/JSON caps and nonce tool-result delimiters (#41-#43)
jkyberneees
committed
security: fix parallel_shell/batch_patch/browser/telegram/restart findings (#44-#48)
jkyberneees
committed
test+docs: increase coverage of #44-#48 changes and keep CHEATSHEET current
jkyberneees
committed
security: fixes #50-#53 (Telegram MarkdownV2 escape, resource limit cap, WS connection limits, sub-agent progress bounds)
jkyberneees
committed
security: harden #54-#59 (subagent cleanup, fsatomic, resource search, schedule perms, config TOCTOU, flock docs)
jkyberneees
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

security: harden user-input attack surface (#50-#59)#41

security: harden user-input attack surface (#50-#59)#41
jkyberneees merged 20 commits into
mainfrom
fix/sec-findings-remaining

Commits on Jun 15, 2026

fix(sec): scope audit ingest recorder to run context (#20)

Commits on Jun 16, 2026

fix(sec): scope prompt cancel by session ID (#19)

fix(sec): redact Session.Task before persisting (#21)

Commits on Jun 17, 2026

fix(sec): confine glob/search_files patterns to workspace (#22)

fix(sec): nonce sub-agent untrusted-input fence (#24)

fix(sec): reject symlinks in sandbox --ctx injection (#25)

fix(sec): allowlist sandbox network modes (#26)

fix(sec): FD-based API key handoff for Telegram restart child (#28)

fix(sec): harden Telegram document filename sanitization (#30)

Fix #31: decline auto-save of tainted skills; require --force to promote

Fix #34: escalate interpreters that can invoke shell commands to code_execution

Fix #37: cap MCP server stdout line size to prevent OOM

security: harden MCP tools/list metadata trust (#38)

security: cap file sizes in read-only perf tools and inline inputs (#39, #40)

test+docs: increase coverage of size-cap changes and keep docs consistent

security: fix schedule locking/JSON caps and nonce tool-result delimiters (#41-#43)

security: fix parallel_shell/batch_patch/browser/telegram/restart findings (#44-#48)

test+docs: increase coverage of #44-#48 changes and keep CHEATSHEET current

security: fixes #50-#53 (Telegram MarkdownV2 escape, resource limit cap, WS connection limits, sub-agent progress bounds)

security: harden #54-#59 (subagent cleanup, fsatomic, resource search, schedule perms, config TOCTOU, flock docs)