opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(security): allow PICOCLAW_SERVICE_NAME in default allowlist

Browse source
This commit is contained in:
Keith Patrick 2026-03-08 23:12:23 +00:00
parent 2395428e21
commit 0e724df6b7
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
pkg/tools/shell/env.go
View file

@ -34,6 +34,7 @@ var DefaultEnvAllowlist = map[string]bool{
"HTTP_PROXY": true, "HTTP_PROXY": true,
"HTTPS_PROXY": true, "HTTPS_PROXY": true,
"NO_PROXY": true, "NO_PROXY": true,
"PICOCLAW_SERVICE_NAME": true,
} }
// defaultEnvAllowPrefixes are env var prefixes that are always allowed. // defaultEnvAllowPrefixes are env var prefixes that are always allowed.