Skip to content

fix(security): restrict public environment export - #4166

Merged
kwakayama merged 14 commits into
mainfrom
codex/propose-fix-for-env-export-vulnerability
Aug 26, 2026
Merged

kwakayama merged 14 commits into
mainfrom
codex/propose-fix-for-env-export-vulnerability

fix(security): align host execution posture

cb566b1
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded Aug 26, 2026 in 5m 1s

Annotations

Check failure on line 54 in src/transforms/pipeline/stages/ssr-vf-modules/path-resolver.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 17 to the 15 allowed.

See more on https://sonarcloud.io/project/issues?id=veryfront_veryfront-code&issues=AaA6KSWvQvOKJOUHPzAM&open=AaA6KSWvQvOKJOUHPzAM&pullRequest=4166

Check warning on line 40 in src/platform/compat/framework-source-resolver.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Simplify this regular expression to reduce its runtime, as it has super-linear performance due to backtracking.

See more on https://sonarcloud.io/project/issues?id=veryfront_veryfront-code&issues=AaA9Lmvf--8PcrcbiIDx&open=AaA9Lmvf--8PcrcbiIDx&pullRequest=4166

Check warning on line 40 in src/platform/compat/framework-source-resolver.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Simplify this regular expression to reduce its runtime, as it has super-linear performance due to backtracking.

See more on https://sonarcloud.io/project/issues?id=veryfront_veryfront-code&issues=AaA9Lmvf--8PcrcbiIDw&open=AaA9Lmvf--8PcrcbiIDw&pullRequest=4166