Repository navigation

All pull requests

Labels (10)Milestones (0)New pull request

Open

(168)

Closed

(407)

windows: one spelling per environment variable for the sandboxed command
#739ig-ant opened Oct 17, 2026Collaborator
Node's built-in HTTP clients use the sandbox's proxy
#738ig-ant opened Oct 16, 2026Collaborator
linux: a write deny that leads to a name that is no text lets the command start
#737dylan-conway opened Oct 16, 2026Collaborator
[do not merge] windows: integration of open changes for testing
#736ig-ant opened Oct 16, 2026Collaborator
proxy: the ask callback is told which invocation asked
#735ken-jo opened Oct 16, 2026
windows: the user's profile is readable to sandboxed commands, minus credential stores
#733ig-ant opened Oct 15, 2026Collaborator
windows: run the fence probe under the write-restricted token and observe token tricks
#731ig-ant opened Oct 15, 2026Collaborator
windows: the write-restricted token and kept grants are the default
#730ig-ant opened Oct 15, 2026Collaborator
windows: keep write grants between sessions under the write-restricted token
#729ig-ant opened Oct 15, 2026Collaborator
windows: network.allowLocalBinding opens loopback to sandboxed commands
#728ig-ant opened Oct 15, 2026Collaborator
windows: protect the runner's threads from the sandboxed child
#727ig-ant opened Oct 15, 2026Collaborator
windows: record what a sandboxed command can reach over SMB and WSL
#726ig-ant opened Oct 15, 2026Collaborator
windows: fence probe covers both socket orderings; filter-set revision
#725ig-ant opened Oct 15, 2026Collaborator
windows: give the sandbox the client end of the stdin pipe
#724ig-ant opened Oct 15, 2026Collaborator
macOS: a caller can grant ioctl on the one terminal it spawns on
#722ken-jo opened Oct 15, 2026
windows: wfp status reads partial when the set is incomplete, so a plain install repairs it
#716blairducrayoppat opened Oct 15, 2026
credentials: injectInto, where in a request a masked credential is substituted
#715carlostapiacl opened Oct 15, 2026
windows: MXC backend with MXC SDK 0.9, replayed onto main for CI
#713ig-ant opened Oct 14, 2026Collaborator
windows: opt-in write-restricted token for the sandboxed child
#712ig-ant opened Oct 14, 2026Collaborator
windows: pass the JVM proxy agent to sandboxed commands
#711ig-ant opened Oct 14, 2026Collaborator
windows: fewer DACL rewrites per session, and non-blocking ACL calls
#710ig-ant opened Oct 14, 2026Collaborator
windows: report a disabled Secondary Logon service by name
#709ig-ant opened Oct 14, 2026Collaborator
windows: skip the deny restore unless every grant was released
#708ig-ant opened Oct 14, 2026Collaborator
linux: an absent write-denied file reads as empty, not "Permission denied"
#707matteo-ms opened Oct 14, 2026
1
Add .srt-settings.json to DANGEROUS_FILES (#275)
#703carlostapiacl opened Oct 13, 2026

Navigation Menu

Repository navigation

All pull requests

windows: one spelling per environment variable for the sandboxed command

Node's built-in HTTP clients use the sandbox's proxy

linux: a write deny that leads to a name that is no text lets the command start

[do not merge] windows: integration of open changes for testing

proxy: the ask callback is told which invocation asked

windows: the user's profile is readable to sandboxed commands, minus credential stores

windows: run the fence probe under the write-restricted token and observe token tricks

windows: the write-restricted token and kept grants are the default

windows: keep write grants between sessions under the write-restricted token

windows: network.allowLocalBinding opens loopback to sandboxed commands

windows: protect the runner's threads from the sandboxed child

windows: record what a sandboxed command can reach over SMB and WSL

windows: fence probe covers both socket orderings; filter-set revision

windows: give the sandbox the client end of the stdin pipe

macOS: a caller can grant ioctl on the one terminal it spawns on

windows: `wfp status` reads `partial` when the set is incomplete, so a plain `install` repairs it

credentials: injectInto, where in a request a masked credential is substituted

windows: MXC backend with MXC SDK 0.9, replayed onto main for CI

windows: opt-in write-restricted token for the sandboxed child

windows: pass the JVM proxy agent to sandboxed commands

windows: fewer DACL rewrites per session, and non-blocking ACL calls

windows: report a disabled Secondary Logon service by name

windows: skip the deny restore unless every grant was released

linux: an absent write-denied file reads as empty, not "Permission denied"

Add .srt-settings.json to DANGEROUS_FILES (#275)

Pull requests