Security sweep: hostile repositories, terminal, updater, DoS; tests that pin the security rules by jkyberneees · Pull Request #21 · BackendStack21/codeviewer

fix: block git lazy fetch, Trojan Source in code view, and other bugs

claude

committed

c128428

fix(git,search): NUL-separated driver keys; the search worker opens the checked real path

claude

committed

4122ca3

fix: blame ignores hostile ignoreRevsFile for real; more names show hidden characters

claude

committed

67a6924

fix: adversarial pass on the HTTP layer and client views

claude

committed

5f8002e

fix(term,pty,git): bound hostile terminal output, correct replay modes, survive a deleted folder

claude

committed

b486783

fix(update,ci): checksum what was written; no pre-releases; keep the only copy on a failed swap; pin actions

claude

committed

ac2f8e5

fix: second adversarial pass (git, client shell, server limits, regressions)

claude

committed

474b7cc

fix(settings): merge PATCH keys through a Map, not property writes on a plain object

claude

committed

e306c86

test(pty): compare replays only after the shell has gone quiet

claude

committed

7b1d010

test: check markBidi's text without a tag-stripping regex (CodeQL incomplete sanitization)

claude

committed

9c7a060

fix+test: third adversarial pass (8 experts) and tests that pin the security rules

claude

committed

4d1b0b9

fix: hostile-content DoS from the third pass; robust palette timing test

claude

committed

49237c2

test: no tag-stripping regex in the bidi budget test; bidi controls in tests written as escapes

claude

committed

c2b10eb

test: collect garbage before every timing sample (macOS CI flake)

claude

committed

5c8dc4e

Navigation Menu

Repository navigation

Security sweep: hostile repositories, terminal, updater, DoS; tests that pin the security rules - #21

Security sweep: hostile repositories, terminal, updater, DoS; tests that pin the security rules#21
jkyberneees merged 14 commits into
mainfrom
fix/bug-security-sweep

Commits on Nov 3, 2026

fix: block git lazy fetch, Trojan Source in code view, and other bugs

fix(git,search): NUL-separated driver keys; the search worker opens the checked real path

fix: blame ignores hostile ignoreRevsFile for real; more names show hidden characters

fix: adversarial pass on the HTTP layer and client views

fix(term,pty,git): bound hostile terminal output, correct replay modes, survive a deleted folder

fix(update,ci): checksum what was written; no pre-releases; keep the only copy on a failed swap; pin actions

fix: second adversarial pass (git, client shell, server limits, regressions)

fix(settings): merge PATCH keys through a Map, not property writes on a plain object

test(pty): compare replays only after the shell has gone quiet

test: check markBidi's text without a tag-stripping regex (CodeQL incomplete sanitization)

fix+test: third adversarial pass (8 experts) and tests that pin the security rules

fix: hostile-content DoS from the third pass; robust palette timing test

test: no tag-stripping regex in the bidi budget test; bidi controls in tests written as escapes

test: collect garbage before every timing sample (macOS CI flake)