mirror of
https://github.com/openai/codex.git
synced 2026-09-11 20:36:49 +00:00
e3e5ad2847
## Why An `apply_patch` path can be replaced with a symlink after verification, allowing an unsandboxed patch operation to reach a different file than the one that was approved. ## What changed - Add `follow_symlinks` options to executor filesystem reads, writes, metadata lookups, directory creation, and removal, including the corresponding `followSymlinks` protocol fields. - Implement no-follow filesystem operations on Unix and Windows that reject links in any path component and restrict file access to regular files. - Run `apply_patch` with symlink traversal disabled when an otherwise-required sandbox is bypassed, while retaining the existing follow-symlink default for standalone callers. ## Testing - Cover leaf and ancestor symlinks across patch add, update, delete, and move operations, including a path swap after verification. - Exercise local and remote no-follow filesystem behavior, concurrent directory creation, special-file rejection, and Windows reparse points. GitOrigin-RevId: 43fd479084891493ce13564fbd894b98f329c6dd
25 lines
556 B
TOML
25 lines
556 B
TOML
[package]
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
name = "codex-connectors-extension"
|
|
version.workspace = true
|
|
|
|
[lib]
|
|
name = "codex_connectors_extension"
|
|
path = "src/lib.rs"
|
|
doctest = false
|
|
test = false
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[dependencies]
|
|
codex-connectors = { workspace = true }
|
|
codex-core-plugins = { workspace = true }
|
|
codex-file-system = { workspace = true }
|
|
codex-plugin = { workspace = true }
|
|
codex-utils-path-uri = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
tracing = { workspace = true }
|