2 commits

Author	SHA1	Message	Date
Tiago Santos	75c32e6d65	fix: fix and improve test isolation and collision with environment (#530) ... * fix: fix and improve test isolation and collision with environment * docs: remove unnecessary comment * test(env-isolation): clear CODEBURN_FORCE_MACOS_MAJOR and pin TZ Two env vars read in src/ were not isolated: CODEBURN_FORCE_MACOS_MAJOR (now cleared so it cannot leak between tests) and TZ (now pinned to UTC, since clearing it falls back to the OS zone and would shift date buckets versus a clean CI runner). --------- Co-authored-by: AgentSeal <hello@agentseal.org>	2026-06-20 13:42:10 +02:00
Ninym	e890d9bfc3	test(security): add failing test for HIGH-1 prototype pollution ... Three PoC fixtures (tool name, bash command, model name) reproduce the audit's HIGH-1 attack. Tests assert Object.prototype.calls stays undefined after parsing. They fail against current parser.ts -- Task 3 will close the pollution sink with Object.create(null).	2026-04-17 08:32:18 +02:00