liqiang-fit2cloud
|
92167a980f
|
fix: deny access to local services by IPv6 and IPv6-mapped IPv4 addresses for sandbox.
|
2025-12-18 11:21:46 +08:00 |
|
liqiang-fit2cloud
|
d68acede6f
|
refactor: change error number.
|
2025-12-09 19:02:49 +08:00 |
|
liqiang-fit2cloud
|
1deea980ee
|
refactor: change error number.
|
2025-12-08 11:29:54 +08:00 |
|
liqiang-fit2cloud
|
71f1e26c8f
|
refactor: run python code without su -.
|
2025-12-03 09:52:02 +08:00 |
|
liqiang-fit2cloud
|
e04d7d7cd4
|
refactor: add comment.
|
2025-12-02 18:40:49 +08:00 |
|
liqiang-fit2cloud
|
ee539322ad
|
feat: banned host support CIDR.
|
2025-12-02 16:58:07 +08:00 |
|
liqiang-fit2cloud
|
64561a7b67
|
fix: forbid sandbox to replace process, only creating is permitted
|
2025-11-28 11:22:38 +08:00 |
|
liqiang-fit2cloud
|
f67aef11fd
|
fix: os.execvp() can create subprocess.
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
|
2025-11-27 20:11:38 +08:00 |
|
liqiang-fit2cloud
|
3bfe400d70
|
build: fix gcc error in arm64.
|
2025-11-27 16:08:58 +08:00 |
|
liqiang-fit2cloud
|
f341930795
|
security: not allow to create subprocess in sandbox by default.
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
|
2025-11-26 15:18:43 +08:00 |
|
liqiang-fit2cloud
|
fd4c14f8e8
|
refactor: format code.
|
2025-11-26 12:16:20 +08:00 |
|
liqiang-fit2cloud
|
a89b1ff6d9
|
security: not allow to create subprocess in sandbox by default.
|
2025-11-26 11:24:59 +08:00 |
|
liqiang-fit2cloud
|
75da3bd82d
|
refactor: format code.
|
2025-11-25 10:58:17 +08:00 |
|
liqiang-fit2cloud
|
5e909a4ba1
|
feat: add MAXKB_SANDBOX_PYTHON_PROCESS_TIMEOUT_SECONDS env.
|
2025-11-25 10:27:08 +08:00 |
|
liqiang-fit2cloud
|
057e0420cf
|
security: not allow to create subprocess in sandbox by default.
|
2025-11-24 18:25:20 +08:00 |
|
liqiang-fit2cloud
|
71165cdb71
|
refactor: add code comment.
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
|
2025-11-11 18:32:52 +08:00 |
|
liqiang-fit2cloud
|
1ed1bbc1b0
|
refactor: throw EACCES error for IP, throw EAI_FAIL for domain name.
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
|
2025-11-10 10:08:57 +08:00 |
|
liqiang-fit2cloud
|
ff570a3c71
|
refactor: read SANDBOX_BANNED_HOSTS from file instead of env.
|
2025-11-07 09:47:35 +08:00 |
|
liqiang-fit2cloud
|
f0ecad6de1
|
refactor: rename MAXKB_SANDBOX_PYTHON_ALLOW_HOSTS_REGEXES to MAXKB_SANDBOX_PYTHON_BANNED_HOSTS
|
2025-11-06 15:41:35 +08:00 |
|
liqiang-fit2cloud
|
6e39df454c
|
refactor: rename MAXKB_SANDBOX_PYTHON_ALLOW_HOSTS_REGEXES to MAXKB_SANDBOX_PYTHON_ALLOW_HOST_REGEXES
|
2025-11-06 11:23:09 +08:00 |
|
liqiang-fit2cloud
|
9029240931
|
refactor: rename MAXKB_SANDBOX_PYTHON_BANNED_HOSTS to MAXKB_SANDBOX_PYTHON_ALLOW_HOSTS_REGEXES
|
2025-11-06 11:03:48 +08:00 |
|
liqiang-fit2cloud
|
1f4d6d1123
|
feat: add MAXKB_SANDBOX_PYTHON_BANNED_HOSTS env to ban host for sandbox in tools code.
|
2025-11-05 19:03:17 +08:00 |
|
liqiang-fit2cloud
|
f0be269cdc
|
feat: add MAXKB_SANDBOX_PYTHON_BANNED_HOSTS env to ban host for sandbox in tools code.
|
2025-11-05 18:44:57 +08:00 |
|
liqiang-fit2cloud
|
1d749a4a92
|
feat: add MAXKB_SANDBOX_PYTHON_BANNED_HOSTS env to ban host for sandbox in tools code.
|
2025-11-05 17:00:50 +08:00 |
|