Austin Pickett dcf99b55a3 fix(security): address CodeQL path-traversal and info-exposure findings ...

- Add _validate_plugin_name() guard on all {name} path param endpoints
  (rejects /, \, .. before reaching plugin logic)
- Strip after_install_path from install response (no internal paths to client)
- Update nix/tui.nix lockfile hash to match committed package-lock.json

2026-04-30 18:50:28 -04:00

..

checks.nix

change(nix): dedupe nix lockfile checking scripts in ci (#18000)

2026-04-30 22:52:30 +05:30

configMergeScript.nix

feat: nix flake — uv2nix build, NixOS module, persistent container mode (#20)

2026-03-26 01:08:02 +05:30

devShell.nix

change(nix): dedupe nix lockfile checking scripts in ci (#18000)

2026-04-30 22:52:30 +05:30

hermes-agent.nix

change(nix): dedupe nix lockfile checking scripts in ci (#18000)

2026-04-30 22:52:30 +05:30

lib.nix

change(nix): dedupe nix lockfile checking scripts in ci (#18000)

2026-04-30 22:52:30 +05:30

nixosModules.nix

feat(irc): add interactive setup

2026-04-29 21:56:51 -07:00

overlays.nix

fix(banner): show correct update status on nix-built hermes (#17550)

2026-04-30 07:03:00 +05:30

packages.nix

fix(banner): show correct update status on nix-built hermes (#17550)

2026-04-30 07:03:00 +05:30

python.nix

feat(nix): declarative plugin installation for NixOS module (#15953)

2026-04-28 00:18:32 +05:30

tui.nix

fix(security): address CodeQL path-traversal and info-exposure findings

2026-04-30 18:50:28 -04:00

web.nix

change(nix): dedupe nix lockfile checking scripts in ci (#18000)

2026-04-30 22:52:30 +05:30