Grayscale/nanobot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,275 Commits 2 Branches 1 Tag
main
Commit Graph
3 Commits
Author SHA1 Message Date
Xubin Ren edaef4e4f5 fix(cli): isolate management subprocess environments 2026-08-12 21:09:29 +09:00
Xubin Ren abfcdd481a fix(cli): validate Windows subprocess environment 2026-08-12 02:57:48 +09:00
LHMQ878 ec3dfb21ba fix(cli): stop leaking API keys to CLI app subprocesses 
Installed CLI apps were started with os.environ.copy(), so provider keys
from the parent process were visible to untrusted binaries. Use a minimal
allowlist env matching the shell tool.

Fixes #4783
 2026-08-12 02:57:48 +09:00