Skip to content
This repository was archived by the owner on May 23, 2026. It is now read-only.

v0.7.1 — Security Hardening

Choose a tag to compare

View all tags
@magifd2 magifd2 released this 19 Apr 00:49
· 28 commits to main since this release
v0.7.1
6cfbee7

Security Fixes

Addresses code review findings:

  • Directory traversal prevention: fileToDataURL now normalizes paths with filepath.Clean() and validates against an allowlist of permitted base directories
  • SQL read-only enforcement: New IsReadOnlySQL() check at application layer blocks write operations (INSERT/UPDATE/DELETE/DROP/ALTER/CREATE/TRUNCATE) in query-sql, query-preview, and quick-summary tools
  • Tool script security guidelines: README documents stdin JSON argument passing and warns against eval / unquoted shell expansion in custom tool scripts

Full changelog: https://github.com/nlink-jp/shell-agent/blob/main/CHANGELOG.md

Assets 3
Loading