Jacob Tomlinson
|
7bd2761b92
|
Exec approvals: detect command carriers in strict inline eval (#57842)
* Exec approvals: detect command carriers in strict inline eval
* Exec approvals: cover carrier option edge cases
* Exec approvals: cover make and find carriers
* Exec approvals: catch attached eval flags
* Exec approvals: keep sed -E out of inline eval
* Exec approvals: treat sed in-place flags as optional
|
2026-03-31 10:58:17 +01:00 |
|
Jacob Tomlinson
|
1a75906a6f
|
Exec approvals: prevent interpreter allow-always persistence (#57772)
* Exec approvals: block interpreter allow-always persistence
* Exec approvals: normalize interpreter allowlist formatting
* Exec approvals: normalize interpreter allowlist wrapping
* Exec approvals: tighten awk regression coverage
* Exec approvals: harden awk interpreter coverage
|
2026-03-30 17:03:54 +01:00 |
|
Peter Steinberger
|
fef688fb7a
|
test: dedupe utility and config suites
|
2026-03-28 00:26:55 +00:00 |
|
Peter Steinberger
|
a94ec3b79b
|
fix(security): harden exec approval boundaries
|
2026-03-22 09:35:25 -07:00 |
|