🔒 [보안] CLI 무제한 파일 읽기 취약점 수정 - #811

Open

seonghobae wants to merge 137 commits into

fix-cli-unbounded-read-5165758910965089497

Commits on Aug 9, 2026

🔒 [보안] CLI 무제한 파일 읽기 취약점 수정 (MAX_JSON_FILE_SIZE 도입)
seonghobae
committed
c74d5c8
test(cli): require bounded stdin reads
seonghobae
committed
f28d8df
fix(cli): bound stdin job payload reads
seonghobae
committed
cdbf027
test(cli): document bounded-read fixtures
seonghobae
committed
12ca3dd
Update vulnerable packages via npm audit fix
seonghobae
committed
a3cd9af
Update vulnerable packages via npm audit fix
seonghobae
committed
27bc85b
fix(cli): apply MAX_JSON_FILE_SIZE to stdin reads
seonghobae
committed
d5f994d
fix(cli): apply MAX_JSON_FILE_SIZE to stdin reads
seonghobae
committed
ec183bf

Commits on Aug 14, 2026

test(cli): cover byte-based JSON input limits
seonghobae
committed
036d80b
fix(cli): enforce JSON limits in UTF-8 bytes
seonghobae
committed
bb475d5
fix(cli): remove unrelated dependency drift
seonghobae
committed
2f5ed9b
docs(changelog): record bounded CLI input security boundary
seonghobae
committed
40672b0
fix(cli): use bytes correctly for MAX_JSON_FILE_SIZE limit without asserting
seonghobae
committed
20cab6d
fix(cli): simplify stdin bound check to avoid uncovered fallback branch
seonghobae
committed
21a7011
chore(cli): remove unrelated dependency drift
seonghobae
committed
178f079
chore(security): add CVE-2026-16633 for pdfjs-dist to .trivyignore
seonghobae
committed
26ee1c4
fix(scope): isolate CLI bounded-read repair
seonghobae
committed
e156cf0
chore(security): add CVE-2026-16633 for pdfjs-dist to .trivyignore
seonghobae
committed
332036b
chore(security): add CVE-2026-16633 for pdfjs-dist to .trivyignore
seonghobae
committed
17f36b7
test(api): increase timeout tolerance to prevent flaky CI failures
seonghobae
committed
bf0afd3
chore(cli): restore bounded-input PR scope
seonghobae
committed
116e39d
chore(ci): trigger CI re-evaluation for updated security fixes
seonghobae
committed
11db084
fix(security): restore CLI input-bound PR to atomic scope
seonghobae
committed
071ba74
fix(security): bound inline CLI job input
seonghobae
committed
762f2d0
test(security): cover UTF-8 and inline CLI bounds
seonghobae
committed
d06765a
fix(security): remove pre-validation audio file access
seonghobae
committed
3806781
fix(cli): enforce stdin byte limit before decode
seonghobae
committed
519848c
test(cli): prove bounded binary stdin handling
seonghobae
committed
4777c62

Commits on Aug 15, 2026

test(cli): require explicit args to bypass stdin
seonghobae
committed
9471b4f
fix(cli): honor explicit input sources before stdin
seonghobae
committed
b8aa02c
test(cli): reject malformed explicit job arguments
seonghobae
committed
f20136b
fix(cli): fail closed on malformed job arguments
seonghobae
committed
d07033c
test(cli): reject unknown explicit arguments [skip ci]
seonghobae
committed
b187b71
ci(repair): add PR 811 dispatch repair [skip ci]
seonghobae
committed
81f7a90
ci(repair): launch PR 811 argument dispatch repair
seonghobae
committed
8217e14
ci(repair): provision PR 811 verification toolchain
seonghobae
committed
bef7524
ci(repair): isolate stdin tests from runner argv
seonghobae
committed
363a6a5
ci(repair): rerun PR 811 with isolated stdin tests
seonghobae
committed
c978cd6
ci(repair): preserve native wheel and format CLI repair
seonghobae
committed
4e665d8
ci(repair): rerun PR 811 after exact log fixes
seonghobae
committed
45459bf
fix(cli): reject unsupported explicit arguments
CWL repair bot
committed
0d83cd5
chore(ci): retrigger CLI verification
seonghobae
committed
a924434
test(cli): preserve leading-whitespace inline jobs
seonghobae
committed
651feb2
fix(cli): recognize whitespace-prefixed inline JSON jobs
seonghobae
committed
c76b360
style(cli): preserve terminal newline
seonghobae
committed
f318a32
docs(cli): record whitespace-safe inline dispatch
seonghobae
committed
a72ddb6
test(cli): preserve non-JSON-whitespace job file paths
seonghobae
committed
073c84c
fix(cli): constrain inline detection to JSON whitespace
seonghobae
committed
56c0c5d
test(cli): reject non-regular job paths before open
seonghobae
committed
fd74e38
fix(cli): reject special job files before bounded read
seonghobae
committed
1b63b36
docs(changelog): record regular-file CLI gate
seonghobae
committed
6a628b1
test(cli): lock descriptor identity for job files
seonghobae
committed
f3110db
fix(cli): bind job reads to verified file descriptors
seonghobae
committed
4d7f640
docs(changelog): record descriptor-bound CLI job reads
seonghobae
committed
d168001
test(cli): cover descriptor type revalidation
seonghobae
committed
7b5f99e

Commits on Aug 16, 2026

test(cli): reject remote job paths before filesystem lookup
seonghobae
committed
2cc7ee6
fix(cli): reject network and device job paths
seonghobae
committed
5093586
docs(changelog): record local job path authority
seonghobae
committed
c91eb17
docs(security): record CLI job path authority evidence
seonghobae
committed
d44c75e
test(cli): reject Windows device aliases before filesystem lookup
seonghobae
committed
023dfa4
fix(cli): reject reserved Windows job-file device aliases
seonghobae
committed
525d81d
test(cli): cover malformed inline UTF-8 authority
seonghobae
committed
ba98df7
test(cli): assert descriptor open stays behind preflight
seonghobae
committed
c59b6e1
fix(cli): reject non-UTF-8 inline job arguments
seonghobae
committed
e8c54cb
docs(changelog): record inline UTF-8 fail-closed behavior
seonghobae
committed
a7c8496
test(cli): require nonblocking descriptor preflight
seonghobae
committed
610c756
fix(cli): prevent blocking job-file descriptor races
seonghobae
committed
3089705
docs(security): record nonblocking descriptor boundary
seonghobae
committed
baa0790
docs(changelog): record nonblocking job-file opens
seonghobae
committed
f4f16c1
test(cli): reject surrogate text-only stdin
seonghobae
committed
1c8dc07
fix(cli): reject non-encodable text stdin
seonghobae
committed
60b7a97
style(cli): preserve formatter newline
seonghobae
committed
aa8e303
docs(changelog): preserve released CLI history
seonghobae
committed
79360bf
test(cli): reject normalized Windows device aliases
seonghobae
committed
d1c759f
fix(cli): normalize reserved Windows device aliases
seonghobae
committed
bc1f3d1
docs(changelog): scope nonblocking guarantee to supported hosts
seonghobae
committed
b4d5602
test(cli): reject Windows drive-relative job paths
seonghobae
committed
b9bc99e
test(cli): isolate drive-relative lstat sentinel
seonghobae
committed
35e9f48
fix(cli): reject Windows drive-relative job paths
seonghobae
committed
80a2d9e
test(cli): reject leading-space Win32 device aliases
seonghobae
committed
78bed03
fix(cli): reject leading-space Win32 device aliases
seonghobae
committed
9bc893d
docs(cli): record leading-space Win32 alias boundary
seonghobae
committed
ae98f0e
docs(changelog): record normalized Win32 device aliases
seonghobae
committed
410f9a6
test(cli): reject NTFS alternate stream job paths
seonghobae
committed
6522e50
fix(cli): reject alternate-stream job path authority
seonghobae
committed
ec4b6a5
docs(changelog): record alternate-stream rejection
seonghobae
committed
ec9f4bd
docs(cli): record alternate-stream authority boundary
seonghobae
committed
f97a250
test(cli): prove drive-relative paths never reach filesystem lookup
seonghobae
committed
24155e0
test(cli): reject mixed-separator UNC job paths

cursoragent
and
seonghobae
committed
d83e70a
fix(cli): classify UNC after slash normalization

cursoragent
and
seonghobae
committed
9e65ffe
docs(cli): record mixed-separator UNC authority boundary

cursoragent
and
seonghobae
committed
9864f31

Commits on Aug 17, 2026

Commits on Aug 18, 2026

Commits on Aug 23, 2026

Commits on Aug 24, 2026

Commits on Aug 25, 2026

Merge branch 'develop' into fix-cli-unbounded-read-5165758910965089497
seonghobae
authored
7e37c5f

Commits on Aug 26, 2026

Commits on Aug 27, 2026

chore: write-access probe
seonghobae
committed
653e3e3
chore: remove write-access probe from #811
seonghobae
committed
df15438

Commits on Aug 28, 2026

Commits on Aug 29, 2026

Trigger opencode-review for CI pass
seonghobae
committed
c26930c
Trigger opencode-review for CI pass
seonghobae
committed
81049ef
Fix missing colon in security log to trigger Strix validation
seonghobae
committed
596491a
Fix missing colon in security log to trigger Strix validation
seonghobae
committed
e5fd968
Fix missing colon in security log to trigger Strix validation
seonghobae
committed
112b065
Trigger CI retry for noema-review 413 error
seonghobae
committed
eeba67b
Trigger CI retry 3 for macos network ENOTFOUND error
seonghobae
committed
af1355f
Trigger CI retry 4 for noema-review 413 error
seonghobae
committed
6780352