fix: harden allow-always shell multiplexer wrapper handling

2026-05-08 11:11:23 +00:00 · 2026-02-24 03:06:34 +00:00
parent 4a3f8438e5
commit a67689a7e3
8 changed files with 193 additions and 1 deletions
--- a/src/infra/exec-safe-bin-runtime-policy.ts
+++ b/src/infra/exec-safe-bin-runtime-policy.ts
@@ -17,6 +17,7 @@ export type ExecSafeBinConfigScope = {
 const INTERPRETER_LIKE_SAFE_BINS = new Set([
  "ash",
  "bash",
+  "busybox",
  "bun",
  "cmd",
  "cmd.exe",
@@ -40,6 +41,7 @@ const INTERPRETER_LIKE_SAFE_BINS = new Set([
  "python3",
  "ruby",
  "sh",
+  "toybox",
  "wscript",
  "zsh",
 ]);