Willem Jiang 24a8ea76ee feat(sandbox): restrict risky absolute paths in local bash commands ...

- validate absolute path usage in local-mode bash commands
- allow only /mnt/user-data virtual paths for user data access
- keep a small allowlist for system executable/device paths
- return clear permission errors for unsafe command paths
- add regression tests for bash path validation rules

2026-03-05 22:13:06 +08:00

3.1 KiB

Raw Blame History

View Raw