fettpl 87dcd7a7a0 fix(security): expand git argument sanitization (#523) ...

* fix(security): expand git argument sanitization

Expand sanitize_git_args() blocklist to also reject --pager=, --editor=,
-c (config injection), --no-verify, and > in arguments. Apply validation
to git_add() paths and git_diff() files argument (previously only called
from git_checkout()). The -c check uses exact match to avoid
false-positives on --cached.

Closes #516

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* style: apply rustfmt to providers/mod.rs

Fix pre-existing formatting issue from main.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-17 07:51:08 -05:00

..

browser_open.rs

refactor: simplify CLI commands and update architecture docs

2026-02-14 05:17:16 -05:00

browser.rs

fix(browser): preserve backend-specific unsupported-action errors

2026-02-17 18:12:27 +08:00

composio.rs

fix(security): reduce residual CodeQL logging flows

2026-02-17 19:19:06 +08:00

cron_add.rs

Implement cron job management tools and types

2026-02-17 17:06:28 +08:00

cron_list.rs

Implement cron job management tools and types

2026-02-17 17:06:28 +08:00

cron_remove.rs

Implement cron job management tools and types

2026-02-17 17:06:28 +08:00

cron_run.rs

Implement cron job management tools and types

2026-02-17 17:06:28 +08:00

cron_runs.rs

Implement cron job management tools and types

2026-02-17 17:06:28 +08:00

cron_update.rs

Implement cron job management tools and types

2026-02-17 17:06:28 +08:00

delegate.rs

fix(ci): suppress option_as_ref_deref on credential refs

2026-02-17 19:19:06 +08:00

file_read.rs

fix(security): move record_action before canonicalize in file_read

2026-02-16 17:21:52 +01:00

file_write.rs

fix(security): enforce action guards in file_write and scheduler (#269)

2026-02-16 01:57:58 -05:00

git_operations.rs

fix(security): expand git argument sanitization (#523)

2026-02-17 07:51:08 -05:00

hardware_board_info.rs

fix: resolve all clippy warnings, formatting, and Mistral endpoint

2026-02-17 20:00:08 +08:00

hardware_memory_map.rs

fix: resolve all clippy warnings, formatting, and Mistral endpoint

2026-02-17 20:00:08 +08:00

hardware_memory_read.rs

fix(security): resolve rebase conflicts and provider regressions

2026-02-17 19:19:06 +08:00

http_request.rs

chore(lint): extend low-risk clippy cleanup batch

2026-02-17 16:40:58 +08:00

image_info.rs

fix(memory): prevent autosave key collisions across runtime flows

2026-02-15 22:55:52 -05:00

memory_forget.rs

feat(memory): add session_id isolation to Memory trait (#530)

2026-02-17 07:44:05 -05:00

memory_recall.rs

feat(memory): add session_id isolation to Memory trait (#530)

2026-02-17 07:44:05 -05:00

memory_store.rs

feat(memory): add session_id isolation to Memory trait (#530)

2026-02-17 07:44:05 -05:00

mod.rs

feat(tools): add JSON Schema cleaner for LLM compatibility

2026-02-17 20:02:59 +08:00

pushover.rs

fix(tools): harden pushover security and validation

2026-02-17 19:10:09 +08:00

schedule.rs

Implement cron job management tools and types

2026-02-17 17:06:28 +08:00

schema.rs

fix(tools): harden schema cleaner edge cases

2026-02-17 20:02:59 +08:00

screenshot.rs

feat: add screenshot and image_info vision tools

2026-02-15 14:53:56 -05:00

shell.rs

feat(config): make config writes atomic with rollback-safe replacement (#190)

2026-02-15 12:18:45 -05:00

traits.rs

test: deepen and complete project-wide test coverage (#297)

2026-02-16 05:58:24 -05:00