Abhijit Balaji 95d687a7dd fix(policy): secure and robust regex matching for commandRegex ...

- Implemented targeted argument matching by adding 'argName' to PolicyRule.
- Updated PolicyEngine to match against a specific argument (e.g., 'command')
  when argName is specified, preventing nested property injection bypasses.
- Simplified anchor handling by matching against raw argument values instead
  of JSON strings, enabling standard ^ and $ behavior.
- Added a security regression test to verify bypasses are blocked.
- Resolved type errors in config.ts and various test files.
- Cleaned up TDD-related notes and updated unit tests.

2026-02-20 15:59:16 -08:00

..

a2a-server

Disallow and suppress unsafe assignment (#19736)

2026-02-20 22:28:55 +00:00

cli

Disallow and suppress unsafe assignment (#19736)

2026-02-20 22:28:55 +00:00

core

fix(policy): secure and robust regex matching for commandRegex

2026-02-20 15:59:16 -08:00

devtools

Disallow and suppress unsafe assignment (#19736)

2026-02-20 22:28:55 +00:00

sdk

Disallow and suppress unsafe assignment (#19736)

2026-02-20 22:28:55 +00:00

test-utils

fix(security): rate limit web_fetch tool to mitigate DDoS via prompt injection (#19567)

2026-02-20 17:18:07 +00:00

vscode-ide-companion

Disallow and suppress unsafe assignment (#19736)

2026-02-20 22:28:55 +00:00