switchboard/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Releases 9 Wiki Activity

Feat v0.5.1 chat core library + unicode security gate + cluster registry design
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 4s
Details
CI/CD / test-frontend (pull_request) Successful in 5s
Details
CI/CD / test-go-pg (pull_request) Successful in 2m31s
Details
CI/CD / test-sqlite (pull_request) Successful in 2m45s
Details
CI/CD / build-and-deploy (pull_request) Successful in 1m34s
Details

Browse Source 
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Jeffrey Smith
2026-03-30 12:26:16 +00:00
parent 2abf406db8
commit 5d58a1cd4c
14 changed files with 1883 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
server/sandbox/sandbox.go
View File

@@ -145,6 +145,14 @@ func (s *Sandbox) ExecWithLoader(ctx context.Context, filename, source string, m
}
}()
// Unicode security gate — scan source for invisible/deceptive characters
// before execution (defense in depth; install gate is primary).
if findings := ScanSource(source, filename); len(findings) > 0 {
if blocked, reason := Verdict(findings); blocked {
return nil, fmt.Errorf("unicode security gate: %s (file: %s)", reason, filename)
}
}
globals, err := starlark.ExecFile(thread, filename, source, predeclared)
if err != nil {
return nil, wrapError(err)