fix: harden path sandboxing with symlink protection, safe defaults, and sensitive file guards#209

Merged

anandgupta42 merged 9 commits into

mainfrom

fix/security-hardening-v2

Mar 17, 2026

Commits on Mar 17, 2026

fix: harden path sandboxing with symlink protection, safe defaults, and sensitive file guards

anandgupta42
and
claude
committed
fix: address code review findings — rule ordering bug, cross-platform paths, TOCTOU docs

anandgupta42
and
claude
committed
fix: address multi-model review consensus — movePath guard, case-insensitive matching, expanded patterns

anandgupta42
and
claude
committed
fix: critical symlink/../ escape via realpathSync lexical normalization divergence

anandgupta42
and
claude
committed
fix: UX evaluation — soften bash defaults, expand FAQ, remove .github from sensitive dirs

anandgupta42
and
claude
committed
fix: address Sentry review — dedicated sensitive_write permission, sticky DDL deny rules

anandgupta42
and
claude
committed
chore: remove debug scripts and temporary files

anandgupta42
and
claude
committed
fix: CI failures — update agent test for bash ask default, fix marker mismatches

anandgupta42
and
claude
committed
fix: resolve merge conflict with main, add case-insensitive DDL deny patterns

anandgupta42
and
claude
committed