glmgbj233andssongliu 8ed33fd06a feat: validate generated terminal commands (#12826) ...

* Fix taint path 1 detected by Codex

Repository: 1Panel-dev_1Panel
Result: /home/hejunjie/llm_web_serve/find_github_project/codex_find_taint/batch_results_go_llm_full_mini/1Panel-dev_1Panel.json
Sink kind: command_exec

* Fix taint path 0 detected by Codex

Repository: 1Panel-dev_1Panel
Result: /home/hejunjie/llm_web_serve/find_github_project/codex_find_taint/batch_results_go_llm_full_mini/1Panel-dev_1Panel.json
Sink kind: command_exec

* Validate generated terminal commands

Keep generated output behind the intended trust boundary while preserving the normal safe workflow.

Add regression coverage for the unsafe flow and the expected safe behavior.

* Narrow terminal AI input validation

* refine terminal ai command validation

---------

Co-authored-by: ssongliu <sloooop1x@gmail.com>

2026-05-27 11:08:52 +08:00

..

ai_tools

refactor: update agent and core utilities (#12621)

2026-05-21 12:35:09 +08:00

alert

feat: Add Bark as a new alert notification channel. (#12338)

2026-03-30 10:58:52 +08:00

alert_push

feat: refactor auth and xpack integration

2026-05-21 12:32:52 +08:00

appicon

feat: implement app icon management and caching mechanism (#11719)

2026-01-27 14:02:38 +08:00

bark

feat: Add Bark as a new alert notification channel. (#12338)

2026-03-30 10:58:52 +08:00

clam

refactor: update agent and core utilities (#12621)

2026-05-21 12:35:09 +08:00

cloud_storage

feat: Migrate to MinIO SDK and enhance S3 client with TLS and context (#12207)

2026-04-15 10:00:08 +08:00

cmd

fix: improve command output handling (#12837)

2026-05-26 09:33:41 +08:00

common

refactor: update agent and core utilities (#12621)

2026-05-21 12:35:09 +08:00

compose

fix: improve command output handling (#12837)

2026-05-26 09:33:41 +08:00

controller

refactor: update agent and core utilities (#12621)

2026-05-21 12:35:09 +08:00

convert

fix: ensure proper resource management in file operations (#12358)

2026-04-07 17:35:31 +08:00

copier

pref: backend 重命名 agent

2024-07-23 14:48:37 +08:00

csv_export

fix: Fix SSH log export exception when logs are empty (#10114)

2025-08-22 14:37:52 +00:00

ctl_conf

refactor: update agent and core utilities (#12621)

2026-05-21 12:35:09 +08:00

docker

chore: remove unused docker compose dependency (#12835)

2026-05-25 11:38:42 +08:00

email

fix: Resolve the issue of not receiving emails when the sender's name is in Chinese (#12121)

2026-03-09 06:55:50 +00:00

encrypt

chore: Complete system security upgrade (#11961)

2026-02-26 10:01:47 +00:00

env

feat: change some prompt (#12135)

2026-03-10 16:11:31 +08:00

files

fix: improve command output handling (#12837)

2026-05-26 09:33:41 +08:00

firewall

refactor: update agent and core utilities (#12621)

2026-05-21 12:35:09 +08:00

geo

feat: adjust internationalization errors and the positions of global … (#7767)

2025-01-24 03:00:07 +00:00

ini_conf

pref: backend 重命名 agent

2024-07-23 14:48:37 +08:00

mysql

fix: improve command output handling (#12837)

2026-05-26 09:33:41 +08:00

nginx

fix: Fix the issue preventing the successful creation of the OpenClaw deployment website. (#12206)

2026-03-18 15:37:48 +08:00

ntp

refactor: update agent and core utilities (#12621)

2026-05-21 12:35:09 +08:00

postgresql

fix: improve command output handling (#12837)

2026-05-26 09:33:41 +08:00

psutil

chore: optimize lint and cleanup warnings (#12161)

2026-03-12 09:35:33 +00:00

re

fix: improve ssh log parsing (#12803)

2026-05-21 15:26:41 +08:00

redis

fix: Add custom timeout support for remote database (#9859)

2025-08-05 15:54:48 +08:00

req_helper

feat: refactor auth and xpack integration

2026-05-21 12:32:52 +08:00

ssh

feat: Support adding IPv6 nodes (#10470)

2025-09-24 09:40:08 +00:00

ssl

Merge pull request #12829 from rowanchen-com/feat/lego-v5-and-dynadot

2026-05-26 14:18:17 +08:00

terminal

feat: validate generated terminal commands (#12826)

2026-05-27 11:08:52 +08:00

toolbox

refactor: update agent and core utilities (#12621)

2026-05-21 12:35:09 +08:00

version

feat: v2 supports international version (#11939)

2026-02-25 10:56:06 +08:00

websocket

feat: add stop functionality for wget file downloads (#12245)

2026-03-20 09:05:54 +00:00

xpack

chore: update xpack integration references (#12628)

2026-05-21 12:35:10 +08:00