Skip to content

Harden DeepSec follow-up findings#870

Merged
nicoalbanese merged 4 commits into
mainfrom
na/2f405e86
May 6, 2026
Merged

Harden DeepSec follow-up findings#870
nicoalbanese merged 4 commits into
mainfrom
na/2f405e86

Conversation

@nicoalbanese

Copy link
Copy Markdown
Contributor

Summary

  • harden GitHub repo URL parsing before sandbox/session clone flows
  • make production rate limiting Redis/KV-backed and fail closed when unavailable
  • tighten web_fetch SSRF checks, bash approval heuristics, and Vercel deployment URL provenance

Validation

  • bun run ci

@vercel

vercel Bot commented May 5, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
open-agents Ready Ready Preview May 5, 2026 0:52am

@nicoalbanese
nicoalbanese marked this pull request as ready for review May 5, 2026 10:03
Comment thread apps/web/lib/rate-limit.ts Outdated
Comment thread packages/agent/tools/fetch.ts Outdated
@nicoalbanese
nicoalbanese merged commit afc7e99 into main May 6, 2026
5 checks passed
@nicoalbanese
nicoalbanese deleted the na/2f405e86 branch May 6, 2026 08:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant