Teknium 469cd16fe0 fix(security): consolidated security hardening — SSRF, timing attack, tar traversal, credential leakage (#5944) ... Salvaged from PRs #5800 (memosr), #5806 (memosr), #5915 (Ruzzgar), #5928 (Awsh1). Changes: - Use hmac.compare_digest for API key comparison (timing attack prevention) - Apply provider env var blocklist to Docker containers (credential leakage) - Replace tar.extractall() with safe extraction in TerminalBench2 (CVE-2007-4559) - Add SSRF protection via is_safe_url to ALL platform adapters: base.py (cache_image_from_url, cache_audio_from_url), discord, slack, telegram, matrix, mattermost, feishu, wecom (Signal and WhatsApp protected via base.py helpers) - Update tests: mock is_safe_url in Mattermost download tests - Add security tests for tar extraction (traversal, symlinks, safe files)		2026-04-07 17:28:37 -07:00
..
__init__.py	feat(environments): add Daytona cloud sandbox backend	2026-03-05 10:02:21 -08:00
base.py	feat: execute_code runs on remote terminal backends (#5088)	2026-04-04 12:57:49 -07:00
daytona.py	refactor: codebase-wide lint cleanup — unused imports, dead code, and inefficient patterns (#5821)	2026-04-07 10:25:31 -07:00
docker.py	fix(security): consolidated security hardening — SSRF, timing attack, tar traversal, credential leakage (#5944)	2026-04-07 17:28:37 -07:00
local.py	fix(terminal): preserve partial output when command times out (#3868)	2026-03-29 21:51:44 -07:00
managed_modal.py	Fixes and refactors enabled by recent updates to main.	2026-03-31 09:29:59 +09:00
modal.py	feat: add .zip document support and auto-mount cache dirs into remote backends (#4846)	2026-04-03 13:16:26 -07:00
modal_common.py	Fixes and refactors enabled by recent updates to main.	2026-03-31 09:29:59 +09:00
persistent_shell.py	feat: execute_code runs on remote terminal backends (#5088)	2026-04-04 12:57:49 -07:00
singularity.py	refactor: codebase-wide lint cleanup — unused imports, dead code, and inefficient patterns (#5821)	2026-04-07 10:25:31 -07:00
ssh.py	fix(security): sanitize workdir parameter in terminal tool backends	2026-04-06 13:19:22 -07:00