zeroclaw/src/security
fettpl a2986db3d6
fix(security): enhance shell redirection blocking in security policy (#521)
* fix(security): enhance shell redirection blocking in security policy

Block process substitution (<(...) and >(...)) and tee command in
is_command_allowed() to close shell escape vectors that bypass existing
redirect and subshell checks.

Closes #514

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* style: apply rustfmt to providers/mod.rs

Fix pre-existing formatting issue from main.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 07:54:26 -05:00
..
audit.rs chore(clippy): clear warning backlog and harden conversions (#383) 2026-02-17 00:32:33 +08:00
bubblewrap.rs fix(security): remediate unassigned CodeQL findings 2026-02-17 19:19:06 +08:00
detect.rs fix(channels): execute tool calls in channel runtime (#302) 2026-02-16 05:07:01 -05:00
docker.rs fix(channels): execute tool calls in channel runtime (#302) 2026-02-16 05:07:01 -05:00
firejail.rs fix(channels): execute tool calls in channel runtime (#302) 2026-02-16 05:07:01 -05:00
landlock.rs fix(channels): execute tool calls in channel runtime (#302) 2026-02-16 05:07:01 -05:00
mod.rs test: deepen and complete project-wide test coverage (#297) 2026-02-16 05:58:24 -05:00
pairing.rs fix: resolve all clippy warnings, formatting, and Mistral endpoint 2026-02-17 20:00:08 +08:00
policy.rs fix(security): enhance shell redirection blocking in security policy (#521) 2026-02-17 07:54:26 -05:00
secrets.rs Merge pull request #68 from fettpl/fix/key-generation-csprng 2026-02-14 21:41:43 -05:00
traits.rs fix(channels): execute tool calls in channel runtime (#302) 2026-02-16 05:07:01 -05:00