matevip 4ae4731d54 fix(tool-guard): harden filesystem-root skip and chat-upload fallback in boundary checks ... - Shell scan: a token normalizing to the filesystem root (//, /., /..) is only skipped when the command carries no destructive verb; with rm/rmdir/shred/srm present the scan fails closed, so 'rm -rf //' is refused while sed empty replacements (s/pattern//) stay allowed. - Chat-upload fallback: a boundary violation is waived only when the requested path itself normalizes inside one of the conversation's candidate upload directories; a basename match against a stored attachment no longer clears the violation. Resolver/DB failures keep the BLOCK finding. The unused candidate-roots resolve overload is removed. - Regression tests for destructive root tokens, sed allowance, the fail-closed compound case, stored-upload-path allowance, basename collisions, cross-conversation paths, and resolver failure.		2026-07-09 15:04:34 +08:00
..
src	fix(tool-guard): harden filesystem-root skip and chat-upload fallback in boundary checks	2026-07-09 15:04:34 +08:00
Dockerfile	fix(ui): resolve state confusion and cross-user data leak when switching menus/workspaces	2026-07-06 10:17:21 +08:00
pom.xml	fix(db): make KingbaseES driver opt-in and restore default SSRF guard	2026-06-14 10:34:35 +08:00
settings.xml	build(maven): declare US + CN repositories in pom.xml, drop opaque mirror	2026-04-25 09:56:17 +08:00