Roo-Code/packages
Roo Code c2711b687e fix: persist task permissions in HistoryItem and add ReDoS mitigation
- Add taskPermissions field to historyItemSchema so permissions survive
  VS Code restarts
- Pass taskPermissions through taskMetadata when saving task history
- Restore permissions via toTaskPermissions() in createTaskWithHistoryItem
- Add isSafeRegex() heuristic that detects nested quantifiers and
  excessive pattern length (ReDoS vectors)
- Apply safety check in both Zod schema validation (parse time) and
  matchesAnyPattern() (runtime belt-and-suspenders)
- Add 32 new tests covering isSafeRegex, schema rejection of unsafe
  patterns, runtime skipping, HistoryItem round-trip, and edge cases

Addresses remaining considerations from PR #12337 review before merge.
2026-05-12 06:18:14 +00:00
..
build Custom tool calling (#10083) 2025-12-21 12:43:06 -08:00
config-eslint Upgrade to ESLint 9 + share eslint config across workspaces (#3815) 2025-05-21 21:30:21 -07:00
config-typescript Move @roo-code/cloud to the Roo-Code repo (#7503) 2025-08-28 11:18:45 -07:00
core Changeset version bump (#12085) 2026-04-08 15:16:12 -06:00
ipc Remove Roo Code Cloud and evals (#12328) 2026-05-11 22:43:45 -04:00
types fix: persist task permissions in HistoryItem and add ReDoS mitigation 2026-05-12 06:18:14 +00:00
vscode-shim Some cleanup in ExtensionHost (#10600) 2026-01-10 02:29:33 -08:00