Vincent Koc bd33a340fb fix(sandbox): sanitize Docker env before marking OPENCLAW_CLI (#42256) ...

* Sandbox: sanitize Docker env before exec marker injection

* Sandbox: add regression test for Docker exec marker env

* Sandbox: disable Windows shell fallback for Docker

* Sandbox: cover Windows Docker wrapper rejection

* Sandbox: test strict env sanitization through Docker args

2026-03-11 00:59:36 -04:00

..

bind-spec.test.ts

refactor(sandbox): share bind parsing and host-path policy checks

2026-02-24 15:04:47 +00:00

bind-spec.ts

refactor(sandbox): share bind parsing and host-path policy checks

2026-02-24 15:04:47 +00:00

browser-bridges.ts

…

browser.create.test.ts

refactor: extract shared sandbox and gateway plumbing

2026-03-02 23:16:47 +00:00

browser.novnc-url.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

browser.ts

refactor: extract shared sandbox and gateway plumbing

2026-03-02 23:16:47 +00:00

config-hash.test.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

config-hash.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

config.ts

refactor(sandbox): centralize dangerous docker override key handling

2026-02-25 02:12:15 +00:00

constants.ts

Sandbox: import STATE_DIR from paths directly (#41439)

2026-03-10 00:18:41 +03:00

context.ts

fix(sandbox): fallback docker user to workspace owner uid/gid

2026-02-22 23:33:15 +01:00

context.user-fallback.test.ts

fix(sandbox): fallback docker user to workspace owner uid/gid

2026-02-22 23:33:15 +01:00

docker.config-hash-recreate.test.ts

refactor: extract shared sandbox and gateway plumbing

2026-03-02 23:16:47 +00:00

docker.execDockerRaw.enoent.test.ts

Sandbox: add actionable error when docker missing (#28547)

2026-03-01 22:14:26 -08:00

docker.ts

fix(sandbox): sanitize Docker env before marking OPENCLAW_CLI (#42256)

2026-03-11 00:59:36 -04:00

docker.windows.test.ts

fix(sandbox): sanitize Docker env before marking OPENCLAW_CLI (#42256)

2026-03-11 00:59:36 -04:00

fs-bridge-mutation-helper.test.ts

fix(security): pin staged writes and fs mutations

2026-03-11 02:38:00 +00:00

fs-bridge-mutation-helper.ts

fix(security): pin staged writes and fs mutations

2026-03-11 02:38:00 +00:00

fs-bridge-mutation-python-source.ts

refactor: unify sandbox fs bridge mutations

2026-03-11 02:10:23 +00:00

fs-bridge-path-safety.ts

fix(security): pin staged writes and fs mutations

2026-03-11 02:38:00 +00:00

fs-bridge-shell-command-plans.ts

refactor: unify sandbox fs bridge mutations

2026-03-11 02:10:23 +00:00

fs-bridge.anchored-ops.test.ts

fix(security): pin staged writes and fs mutations

2026-03-11 02:38:00 +00:00

fs-bridge.boundary.test.ts

refactor: unify sandbox fs bridge mutations

2026-03-11 02:10:23 +00:00

fs-bridge.e2e-docker.test.ts

refactor: unify sandbox fs bridge mutations

2026-03-11 02:10:23 +00:00

fs-bridge.shell.test.ts

fix(security): pin staged writes and fs mutations

2026-03-11 02:38:00 +00:00

fs-bridge.test-helpers.ts

test: restore fs bridge helper export

2026-03-11 02:38:00 +00:00

fs-bridge.ts

fix(security): pin staged writes and fs mutations

2026-03-11 02:38:00 +00:00

fs-paths.test.ts

fix(sandbox): honor explicit bind mounts over workspace defaults

2026-02-22 20:37:22 +01:00

fs-paths.ts

refactor(sandbox): share container-path utils and tighten fs bridge tests

2026-02-25 01:59:53 +00:00

hash.ts

…

host-paths.test.ts

refactor(sandbox): share bind parsing and host-path policy checks

2026-02-24 15:04:47 +00:00

host-paths.ts

fix(windows): normalize namespaced path containment checks

2026-02-26 18:49:48 +00:00

manage.ts

…

network-mode.ts

refactor(sandbox): centralize network mode policy helpers

2026-02-24 23:26:46 +00:00

novnc-auth.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

path-utils.ts

refactor(sandbox): share container-path utils and tighten fs bridge tests

2026-02-25 01:59:53 +00:00

prune.ts

…

registry.test.ts

…

registry.ts

fix: harden sandbox writes and centralize atomic file writes

2026-03-02 16:45:12 +00:00

runtime-status.ts

…

sanitize-env-vars.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

sanitize-env-vars.ts

…

shared.ts

…

test-args.ts

refactor: extract shared sandbox and gateway plumbing

2026-03-02 23:16:47 +00:00

test-fixtures.ts

…

tool-policy.ts

…

types.docker.ts

refactor(agents): dedupe config and truncation guards

2026-02-22 17:54:51 +00:00

types.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

validate-sandbox-security.test.ts

fix(test): use NTFS junctions and platform guards for symlink tests on Windows (openclaw#28747) thanks @arosstale

2026-03-02 10:45:19 -06:00

validate-sandbox-security.ts

refactor(sandbox): centralize network mode policy helpers

2026-02-24 23:26:46 +00:00

workspace-mounts.test.ts

refactor: extract shared sandbox and gateway plumbing

2026-03-02 23:16:47 +00:00

workspace-mounts.ts

refactor: extract shared sandbox and gateway plumbing

2026-03-02 23:16:47 +00:00

workspace.test.ts

fix(security): harden workspace bootstrap boundary reads

2026-03-02 17:07:36 +00:00

workspace.ts

fix(security): harden workspace bootstrap boundary reads

2026-03-02 17:07:36 +00:00