mirror of
https://github.com/openai/codex.git
synced 2026-11-09 20:50:33 +00:00
rreichel3-oai
face241059
Only run the PowerShell AST parser on Windows through trusted system install paths, and skip Windows PowerShell safelisting entirely on non-Windows hosts. Add regression coverage for workspace-controlled pwsh paths so parser classification cannot execute attacker-controlled binaries before sandboxing.