teknium1 b177b4abad fix(security): block gateway and tool env vars in subprocesses ...

Extend subprocess env sanitization beyond provider credentials by blocking Hermes-managed tool, messaging, and related gateway runtime vars. Reuse a shared sanitizer in LocalEnvironment and ProcessRegistry so background and PTY processes honor the same blocklist and _HERMES_FORCE_ escape hatch. Add regression coverage for local env execution and process_registry spawning.

2026-03-15 02:51:04 -07:00

12 KiB

Raw Blame History

View Raw