Bryan Helmkamp e2d258089e fix(server,workflow): close denylist-evasion gaps from security review ... Two fixes from the Run Files security review (docs/agent/reviews/2026-04-19-run-files-security-review.md): Medium — Add `-c core.quotePath=false` to git invocations that feed the denylist. - git_diff_with_timeout (produces final_patch for the degraded fallback) — without this, a tracked file with non-ASCII chars, tabs, quotes, or backslashes in its name makes git emit a header like `diff --git "a/…" "b/…"`. The Run Files server's strip_denylisted_sections parser only recognizes unquoted `a/<old> b/<new>` forms and would let the sensitive section pass through unfiltered. - GIT_HARDENED (the raw-diff / cat-file prefix used by the Run Files enumerator) — applied for symmetry so any future consumer parsing these invocations' output can't be tripped by the same quoted-path divergence. Low — is_sensitive path normalization switches to ASCII-only case fold. Full Unicode `to_lowercase()` can expand a codepoint into multiple chars (e.g. `İ` -> `i\u{307}`), which then silently fails to match an ASCII glob like `id_rsa`. ASCII-only folding makes the homoglyphic-path failure mode explicit — a path a reviewer can see is homoglyphic just doesn't match — rather than disguising it behind an opaque lowercase routine. All denylist globs are ASCII by design. Other findings in the review (denylist policy coverage gaps around id_rsa_backup / .netrc / .npmrc / etc.) are policy decisions, not matcher bugs, and are deferred. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-19 18:04:49 -04:00
..
crates	fix(server,workflow): close denylist-evasion gaps from security review	2026-04-19 18:04:49 -04:00
packages/fabro-api-client	feat(api): add GET /runs/{id}/files spec + RunFilesMeta schema	2026-04-19 15:33:24 -04:00