opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(security): add PICOCLAW_HOME, PICOCLAW_CONFIG, PICOCLAW_EXE to default allowlist

Browse source
This commit is contained in:
Keith Patrick 2026-03-08 23:17:59 +00:00
parent 0e724df6b7
commit ddd394796c
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
pkg/tools/shell/env.go
View file

@ -34,7 +34,10 @@ var DefaultEnvAllowlist = map[string]bool{
"HTTP_PROXY": true,
"HTTPS_PROXY": true,
"NO_PROXY": true,
"PICOCLAW_HOME": true,
"PICOCLAW_CONFIG": true,
"PICOCLAW_SERVICE_NAME": true,
"PICOCLAW_EXE": true,
}
// defaultEnvAllowPrefixes are env var prefixes that are always allowed.