spawn/sh/e2e
A d046a9bfdf
fix: tighten character whitelist for cloud_headless_env values (#2890)
The env value whitelist allowed @, %, +, =, :, and , characters that
are unnecessary for cloud resource names (server names, regions, sizes)
and could be used as shell metacharacters in certain contexts. Restrict
to only [A-Za-z0-9._/-] which matches all legitimate cloud resource
identifiers.

Fixes #2883

Agent: code-health

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-23 08:41:50 +07:00
..
lib fix: tighten character whitelist for cloud_headless_env values (#2890) 2026-03-23 08:41:50 +07:00
e2e.sh fix(e2e): update input tests for new agent CLIs + auto-load email creds (#2877) 2026-03-23 03:08:37 +07:00
interactive-harness.ts feat: never-give-up resilience layer (#2807) 2026-03-19 17:33:22 -07:00