olivetin/service/internal
jamesread 0e45f3b0e3 security: GHSA-xc5w-4v5w-7x65 (HIGH) harden shell argument type safety
Block additional unvalidated argument types from shell actions, enforce
full-string custom regex matching, and allowlist http/https URL schemes.

Update checkbox integration test to use exec, matching the intended shell
vs exec split for choiceless checkbox arguments.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 09:40:48 +01:00
..
acl feat: Rebuild authentication system to support 3k authentication 2025-11-26 22:33:19 +00:00
api chore: fix flakey test 2026-07-07 10:32:33 +01:00
auth security: GHSA-xpxj-f2fm-rqch (HIGH) bound OAuth2 state map growth 2026-07-07 14:26:37 +01:00
config fix(config): reject ambiguous checklist comma format and propagate encode errors 2026-07-07 11:57:20 +01:00
entities fix: Entity ordering (#886, #762) 2026-03-08 22:16:24 +00:00
env feat: template parsing for env in password fields 2026-02-13 23:53:43 +00:00
executor security: GHSA-xc5w-4v5w-7x65 (HIGH) harden shell argument type safety 2026-07-08 09:40:48 +01:00
filehelper refactor: Project directories (#541) 2025-03-22 01:06:59 +00:00
httpservers feat: API Key (bearer) auth 2026-05-21 22:59:12 +01:00
installationinfo feat(policy): add policy to show/hide version number 2026-02-27 21:26:55 +00:00
logfilter chore: Fix many little niggly bugs, test flakes, etc 2026-06-17 22:18:26 +01:00
oncalendarfile fix: execOnCalendarFile, avoid possible crash deleting nil timers 2026-01-21 23:12:39 +00:00
oncron feat: Rebuild authentication system to support 3k authentication 2025-11-26 22:33:19 +00:00
onfileindir fmt: Cleanup coderabbit issues from action details change 2026-05-23 11:38:10 +01:00
onstartup feat: Rebuild authentication system to support 3k authentication 2025-11-26 22:33:19 +00:00
servicehost fix: configurable log directory for windows 2026-06-16 11:24:19 +01:00
tpl security: GHSA-7fq5-7wr8-rjwj (HIGH) Shared template instances could cause command contamination 2026-05-21 23:51:17 +01:00
updatecheck chore: Various codestyle fixes 2025-07-12 23:44:24 +01:00
webhooks feat: circle indicator for running actions, justification support 2026-06-17 23:29:30 +01:00