codex

mirror of https://github.com/openai/codex.git synced 2026-09-04 15:08:45 +00:00

Files

viyatb-oai 2497972808 Allow explicitly permitted loopback proxy targets (#34603 )

## Why

With `allow_local_binding = false`, proxy-aware clients bypassed the managed
proxy for loopback and private IP targets. This prevented explicit local IP and
`localhost` allowlist entries from taking effect.

## What changed

- Route local targets through the managed proxy when local binding is disabled,
  while preserving direct access when it is enabled.
- Allow a non-public connection only when its requested IP literal or
  `localhost` target is explicitly permitted. Continue blocking private
  addresses reached through unrelated hostnames.
- Bypass inherited upstream proxies for non-public targets so Codex applies the
  local-target policy directly.

## Testing

Added connector, upstream proxy, environment override, and Linux sandbox
coverage for explicitly allowlisted loopback access.

GitOrigin-RevId: 35e0d73633d5051816e096bc5aa8d586aec5eea4

2026-07-21 19:50:11 +00:00

app_server.rs

app-server: structure and test JSON shutdown logs (#30314 )

2026-06-26 18:19:56 -07:00

debug_clear_memories.rs

Require absolute paths for test SQLite configuration (#34411 )

2026-07-20 20:54:08 +00:00

debug_models.rs

Add codex debug models to show model catalog (#18625 )

2026-04-20 05:42:22 +00:00

delete.rs

Add session delete commands in CLI and TUI (#27476 )