Diego Rodrigues de Sa e Souza 85c4292ce3 fix(security): correct XML double-unescape and non-CSPRNG nonce from CodeQL sweep (#10154) ...

* fix(security): correct XML double-unescape and non-CSPRNG nonce from CodeQL sweep

Two real defects surfaced by the 2026-08-12 code-scanning triage.

decodeXmlText decoded `&` before `"`/`'`, so `"` — the encoding of
the literal text `"` — collapsed to `"` in a second pass. The decoded values feed the
workspace-root trust comparison in parseTrustedCodexEnvironment, so an encoded path could
decode into a different path than the client declared. Decoding `&` last fixes it.

The tinycms nonce fell back to `Date.now()` plus a non-cryptographic PRNG when
`crypto.randomUUID` was absent. That nonce is signed into the provider's anti-replay
payload, so the fallback produced a predictable value silently. It is now always
`randomUUID()` from node:crypto, which is present on every supported runtime.

Both guards are mutation-validated: reverting either fix makes the new test fail.

Refs #9985

* fix(security): reword tinycms nonce comment so the CSPRNG regression test holds

---------

Co-authored-by: backryun <bakryun0718@proton.me>

2026-08-12 16:03:58 -03:00

..

config

fix: enforce OpenAI model lifecycle without silent reroutes (#8627)

2026-08-12 09:04:41 -03:00

executors

fix(security): correct XML double-unescape and non-CSPRNG nonce from CodeQL sweep (#10154)

2026-08-12 16:03:58 -03:00

handlers

fix(build): repair broken production build, red lint gate and SWR crash (#10198)

2026-08-12 15:58:40 -03:00

lib

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

mcp-server

fix(mcp): stop omniroute_get_health silently discarding real data (#9959)

2026-08-10 00:27:58 -03:00

services

fix(build): repair broken production build, red lint gate and SWR crash (#10198)

2026-08-12 15:58:40 -03:00

shared

Release v3.8.46

2026-07-07 13:14:06 -03:00

transformer

cherry-pick(pr-9826): fix(executors): preserve Command Code usage in Responses streams (#9842)

2026-08-09 09:47:37 -03:00

translator

fix(translator): restore TitleCase tool names on the Claude to Gemini path (#9993)

2026-08-11 09:52:40 -03:00

utils

[v3.8.50] Fix Z.ai web browser transport and model capabilities (#8451)

2026-08-12 08:41:03 -03:00

vendor/codex-chatgpt-web

fix(security): resolve open CodeQL alerts (#10188)

2026-08-12 15:58:58 -03:00

index.ts

[Part 1/3]refactor(qwen): replace legacy Qwen Code and remove OAuth provider (#7866)

2026-07-20 17:53:04 -03:00

package.json

fix(build): remove misleading open-sse/package.json facade and add workspace typecheck gate (#8781)

2026-08-07 18:07:50 -03:00

tsconfig.json

chore(sse): drop deprecated baseUrl from open-sse tsconfig for TS 7.0 (#8473)

2026-07-25 02:53:01 -03:00

types.d.ts

feat(api): add per-key prompt compression bypass (#10001)

2026-08-11 09:20:41 -03:00