harivansh-afk/sandbox-agent
1
0
Fork 0
mirror of https://github.com/harivansh-afk/sandbox-agent.git synced 2026-04-16 04:02:01 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: [US-041] - Restrict crawl endpoint to http/https schemes only

Browse source 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Nathan Flurry 2026-03-17 17:00:24 -07:00
parent 1bd7ef9219
commit a9629c91ea
5 changed files with 151 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/ralph/prd.json
View file

@ -670,7 +670,7 @@
"Tests pass"
],
"priority": 41,
"passes": false,
"passes": true,
"notes": "SECURITY: file:// URLs combined with --no-sandbox Chromium lets anyone read arbitrary files via the crawl endpoint. The crawl link filter explicitly allows file:// scheme and extract_links collects file: hrefs."
},
{