3 Commits

Author	SHA1	Message	Date
Jacob Tomlinson	7bd2761b92	Exec approvals: detect command carriers in strict inline eval (#57842) ... * Exec approvals: detect command carriers in strict inline eval * Exec approvals: cover carrier option edge cases * Exec approvals: cover make and find carriers * Exec approvals: catch attached eval flags * Exec approvals: keep sed -E out of inline eval * Exec approvals: treat sed in-place flags as optional	2026-03-31 10:58:17 +01:00
Jacob Tomlinson	1a75906a6f	Exec approvals: prevent interpreter allow-always persistence (#57772) ... * Exec approvals: block interpreter allow-always persistence * Exec approvals: normalize interpreter allowlist formatting * Exec approvals: normalize interpreter allowlist wrapping * Exec approvals: tighten awk regression coverage * Exec approvals: harden awk interpreter coverage	2026-03-30 17:03:54 +01:00
Peter Steinberger	a94ec3b79b	fix(security): harden exec approval boundaries	2026-03-22 09:35:25 -07:00