Repository navigation

Harden untrusted input at process, file, and protocol boundaries - #757

Merged

mehmetozguldev merged 14 commits into

athasdev:mainfrom

SnaetWarre:security-hardening

Oct 2, 2026

Commits on Sep 20, 2026

Harden the extension download and staging path
SnaetWarre
committed
0085cbc
Block shells and temp paths in tool exec configs
SnaetWarre
committed
56b5794
Cap language server and debug adapter frame sizes
SnaetWarre
committed
5731227
Quote debugger args and terminal drops unconditionally
SnaetWarre
committed
73065ab
Confine agent file and terminal access to the workspace
SnaetWarre
committed
3d272fe
Keep credentials out of connection strings and git errors
SnaetWarre
committed
166785b

Commits on Sep 27, 2026

Leave agent file access to the approval flow
mehmetozguldev
committed
3512090
Merge remote-tracking branch 'origin/main' into pr-757
mehmetozguldev
committed
eded725
Keep shell-ready debug adapter commands intact
mehmetozguldev
committed
c95add6
Quote dropped terminal paths for the active shell
mehmetozguldev
committed
016c56e
Let local development installs skip extension checksums
mehmetozguldev
committed
dfa1818
Merge branch 'main' into security-hardening
mehmetozguldev
authored
9b5f789

Commits on Oct 2, 2026

Merge branch 'main' into security-hardening
mehmetozguldev
authored
43051b2
Block Windows shell names and program launchers in tool configs

mehmetozguldev
and
claude
committed
045be4c