mirror of
https://gitee.com/mateos/mateclaw.git
synced 2026-09-13 11:13:43 +08:00
252a6fc425
execute_code (bash/sh/shell) bypassed the workspace boundary guard, so shell code run through it could read/write/delete paths outside the workspace sandbox (e.g. cat /etc/passwd) while the same paths were blocked for read_file and the shell tools. Bring execute_code under the guard (scan only shell-language code, report the code param), and trust the tool-result spill roots so a legitimate spilled result stays readable. Adds regression tests. |
||
|---|---|---|
| .. | ||
| controller | ||
| engine | ||
| guardian | ||
| model | ||
| repository | ||
| service | ||
| DangerousPattern.java | ||
| DefaultToolGuard.java | ||
| ToolExecutionGuardHelper.java | ||
| ToolGuard.java | ||
| ToolGuardEngineAdapter.java | ||
| ToolGuardResult.java | ||
| WorkspacePathGuard.java | ||