  glmgbj233andssongliu
|
8ed33fd06a
|
feat: validate generated terminal commands (#12826)
* Fix taint path 1 detected by Codex
Repository: 1Panel-dev_1Panel
Result: /home/hejunjie/llm_web_serve/find_github_project/codex_find_taint/batch_results_go_llm_full_mini/1Panel-dev_1Panel.json
Sink kind: command_exec
* Fix taint path 0 detected by Codex
Repository: 1Panel-dev_1Panel
Result: /home/hejunjie/llm_web_serve/find_github_project/codex_find_taint/batch_results_go_llm_full_mini/1Panel-dev_1Panel.json
Sink kind: command_exec
* Validate generated terminal commands
Keep generated output behind the intended trust boundary while preserving the normal safe workflow.
Add regression coverage for the unsafe flow and the expected safe behavior.
* Narrow terminal AI input validation
* refine terminal ai command validation
---------
Co-authored-by: ssongliu <sloooop1x@gmail.com>
|
2026-05-27 11:08:52 +08:00 |
|