fix(desktop): use allowlist for terminal env filtering to prevent secret leakage#582

Merged

Kitenite merged 6 commits into

superset-sh:mainfrom

andreasasprou:fix-node-env-terminals

Jan 4, 2026

Commits on Jan 3, 2026

fix(desktop): prevent NODE_ENV from propagating to terminals
andreasasprou
committed
feat(desktop): comprehensive terminal env sanitization
andreasasprou
committed
refactor(terminal): switch from denylist to allowlist for terminal env filtering
andreasasprou
committed
fix(terminal): handle Windows case-insensitive env vars and add missing vars
andreasasprou
committed
feat(terminal): add common developer tool vars to env allowlist
andreasasprou
committed
docs(terminal): clarify threat model in buildSafeEnv docstring
andreasasprou
committed