Fabio Nunes Cerqueira a497178b3e fix(security): close the findings of GHSA-442p-gxfg-qxv9 ...

- Restricted Mode git: reads run without a signature verifier, hooks
  (including config-defined ones), an external diff, filters or a lazy
  fetch, also inside submodules; every repository and every git starts
  restricted until the project is trusted.
- project.write and plugin quick fixes cannot reach git's own files under
  any spelling or through links; project.write is a high-risk grant.
- Built-in web server: each served root has its own port and token; a
  file outside the project is served with its folder minus dot names, or
  alone when that folder is the home folder or above it; no fixed port.
- Images, references, Markdown links and language-server links reach no
  network share other than the one already open.
- Marketplace: entries whose id or version no manifest may carry are
  dropped; an index read over the network names nothing on this machine;
  network reads are bounded in size and time.
- Agent replies load remote images on a click; the Markdown preview and
  Mermaid configuration no longer fetch from other hosts.

2026-11-11 22:18:48 +08:00

..

src

fix(security): close the findings of GHSA-442p-gxfg-qxv9

2026-11-11 22:18:48 +08:00

tests

feat(github): pull request tool window, timeline and review flow (#477)

2026-10-31 07:50:43 +08:00

Cargo.toml

refactor(core): share process-tree kill helpers across tool crates (#853)

2026-11-02 20:21:07 +08:00