mirror of
https://github.com/openclaw/openclaw.git
synced 2026-03-19 22:10:51 +00:00
f84a41dcb8
Add JAVA_TOOL_OPTIONS, _JAVA_OPTIONS, JDK_JAVA_OPTIONS, PYTHONBREAKPOINT, and DOTNET_STARTUP_HOOKS to blockedKeys in the host exec security policy. Closes #22681
73 lines
1.5 KiB
Swift
73 lines
1.5 KiB
Swift
// Generated file. Do not edit directly.
|
|
// Source: src/infra/host-env-security-policy.json
|
|
// Regenerate: node scripts/generate-host-env-security-policy-swift.mjs --write
|
|
|
|
import Foundation
|
|
|
|
enum HostEnvSecurityPolicy {
|
|
static let blockedKeys: Set<String> = [
|
|
"NODE_OPTIONS",
|
|
"NODE_PATH",
|
|
"PYTHONHOME",
|
|
"PYTHONPATH",
|
|
"PERL5LIB",
|
|
"PERL5OPT",
|
|
"RUBYLIB",
|
|
"RUBYOPT",
|
|
"BASH_ENV",
|
|
"ENV",
|
|
"GIT_EXTERNAL_DIFF",
|
|
"GIT_EXEC_PATH",
|
|
"SHELL",
|
|
"SHELLOPTS",
|
|
"PS4",
|
|
"GCONV_PATH",
|
|
"IFS",
|
|
"SSLKEYLOGFILE",
|
|
"JAVA_TOOL_OPTIONS",
|
|
"_JAVA_OPTIONS",
|
|
"JDK_JAVA_OPTIONS",
|
|
"PYTHONBREAKPOINT",
|
|
"DOTNET_STARTUP_HOOKS"
|
|
]
|
|
|
|
static let blockedOverrideKeys: Set<String> = [
|
|
"HOME",
|
|
"ZDOTDIR",
|
|
"GIT_SSH_COMMAND",
|
|
"GIT_SSH",
|
|
"GIT_PROXY_COMMAND",
|
|
"GIT_ASKPASS",
|
|
"SSH_ASKPASS",
|
|
"LESSOPEN",
|
|
"LESSCLOSE",
|
|
"PAGER",
|
|
"MANPAGER",
|
|
"GIT_PAGER",
|
|
"EDITOR",
|
|
"VISUAL",
|
|
"FCEDIT",
|
|
"SUDO_EDITOR",
|
|
"PROMPT_COMMAND",
|
|
"HISTFILE",
|
|
"PERL5DB",
|
|
"PERL5DBCMD",
|
|
"OPENSSL_CONF",
|
|
"OPENSSL_ENGINES",
|
|
"PYTHONSTARTUP",
|
|
"WGETRC",
|
|
"CURL_HOME"
|
|
]
|
|
|
|
static let blockedOverridePrefixes: [String] = [
|
|
"GIT_CONFIG_",
|
|
"NPM_CONFIG_"
|
|
]
|
|
|
|
static let blockedPrefixes: [String] = [
|
|
"DYLD_",
|
|
"LD_",
|
|
"BASH_FUNC_"
|
|
]
|
|
}
|