Tianyi Cui 9435ca62a6 fix(sandbox): reject overlapping Windows temp roots

2026-08-10 18:08:22 +08:00

..

acl.ts

feat(sandbox): per-session windows-acl write grant with dual-mode restricting lists and a private temp subdirectory

2026-08-08 17:29:43 +08:00

errors.ts

feat(sandbox): Windows ACL write-restriction sandbox (restricted-token runner)

2026-08-08 01:24:33 +08:00

ffi.ts

fix(sandbox): extend the restricted token's default DACL with a write-SID ACE

2026-08-09 12:34:48 +08:00

grant.ts

fix(sandbox): isolate Windows temp capabilities

2026-08-10 16:15:59 +08:00

index.ts

fix(sandbox): reject overlapping Windows temp roots

2026-08-10 18:08:22 +08:00

invariant.ts

feat(sandbox): Windows ACL write-restriction sandbox (restricted-token runner)

2026-08-08 01:24:33 +08:00

path-boundary.ts

fix(sandbox): reject overlapping Windows temp roots

2026-08-10 18:08:22 +08:00

runner.ts

fix(sandbox): reject overlapping Windows temp roots

2026-08-10 18:08:22 +08:00

spawn.ts

fix(sandbox): harden the per-session record and the ACL runner failure paths (review round v6)

2026-08-08 23:23:38 +08:00

token.ts

fix(sandbox): isolate Windows temp capabilities

2026-08-10 16:15:59 +08:00

win32-abi.ts

fix(sandbox): extend the restricted token's default DACL with a write-SID ACE

2026-08-09 12:34:48 +08:00

workspace-sid.ts

fix(sandbox): isolate Windows temp capabilities

2026-08-10 16:15:59 +08:00