L4XB c2e1978876 fix(gateguard): match destructive SQL passed to a database client in a quoted argument ...

The DESTRUCTIVE_SQL_DD phrases (drop table, delete from, truncate) were
only ever tested against quote-stripped text, so a real invocation such
as `psql -c "drop table users"` or `mysql -e "delete from sessions"`,
which must quote the statement, was always allowed. Only the unquoted
spelling, which the shell would split into separate arguments, was
caught.

Keep the quote-stripped scan for the generic case (a commit message
that mentions "drop table" still passes), and additionally test the SQL
phrases against the unquoted argument text when the segment's
executable is a known database client (psql, mysql, mariadb, sqlite3,
duckdb, clickhouse-client, mongosh, ...). The check lives in the
quote-aware pass, so it also applies behind `sh -c` and in chained
segments.

Fixes #3024

2026-09-09 22:34:41 +02:00

..

ci

test: fix Windows ownership paths and failure annotations

2026-09-07 18:09:46 -04:00

commands

fix(commands): generate discoverable skills from learning workflows (#2653)

2026-08-02 14:39:29 -04:00

docker

feat(docker): add hardened CLI test harness (#2625)

2026-08-06 16:52:39 -04:00

docs

test: make release safety fixtures CodeQL-clean

2026-09-07 16:51:51 -04:00

fixtures

fix(install): harden universal setup release path (#2888)

2026-08-30 18:54:00 -04:00

hooks

fix(gateguard): match destructive SQL passed to a database client in a quoted argument

2026-09-09 22:34:41 +02:00

integration

fix(hooks): preserve complete bounded passthrough payloads

2026-09-07 16:26:10 -04:00

lib

fix: close release review gaps and expose failing CI suites

2026-09-07 17:57:26 -04:00

pi

fix(pi): prevent recursive compiled OMP hook execution

2026-09-07 16:26:10 -04:00

scripts

test: fix Windows ownership paths and failure annotations

2026-09-07 18:09:46 -04:00

skills

fix(install): harden ECC installer lifecycle

2026-08-13 16:42:51 -04:00

__init__.py

Small changes

2026-04-12 12:34:45 +05:30

codex-config.test.js

fix(codex): broaden context7 config checks

2026-03-29 00:26:16 -04:00

codex-native-hooks.test.js

feat(install): add guided multi-harness installer (#2649)

2026-08-06 15:39:49 -04:00

conftest.py

docs: salvage focused stale PR contributions

2026-05-11 05:31:12 -04:00

gan-harness.test.js

fix(gan): distinguish scores from verdict thresholds

2026-08-29 14:24:16 -04:00

opencode-config.test.js

test(opencode): require non-empty agent catalog

2026-08-24 20:09:12 -04:00

opencode-plugin-hooks.test.js

fix(opencode): don't crash the whole session when plugins/lib is missing (#2538)

2026-07-28 21:37:41 -04:00

opencode-tools.test.js

fix(opencode): don't crash the whole session when plugins/lib is missing (#2538)

2026-07-28 21:37:41 -04:00

plugin-manifest.test.js

feat(install): add guided multi-harness installer (#2649)

2026-08-06 15:39:49 -04:00

run-all.js

test: fix Windows ownership paths and failure annotations

2026-09-07 18:09:46 -04:00

test_astraflow_provider.py

ci: add Python CI job (ruff, mypy, pytest) for the llm-abstraction package (#2364)

2026-08-11 14:15:57 -04:00

test_atlas_provider.py

ci: add Python CI job (ruff, mypy, pytest) for the llm-abstraction package (#2364)

2026-08-11 14:15:57 -04:00

test_builder.py

test: pin Ollama whitespace normalization

2026-08-28 15:59:31 -04:00

test_claude_provider.py

fix(llm/providers/claude): attach cache_control to system block, not top-level (#2515)

2026-07-17 16:04:32 -04:00

test_executor.py

ci: add Python CI job (ruff, mypy, pytest) for the llm-abstraction package (#2364)

2026-08-11 14:15:57 -04:00

test_invariant_runner.py

ci: add Python CI job (ruff, mypy, pytest) for the llm-abstraction package (#2364)

2026-08-11 14:15:57 -04:00

test_provider_tools.py

fix: harden openai-compatible provider responses

2026-05-18 01:04:28 -04:00

test_resolver.py

ci: add Python CI job (ruff, mypy, pytest) for the llm-abstraction package (#2364)

2026-08-11 14:15:57 -04:00

test_selector.py

ci: add Python CI job (ruff, mypy, pytest) for the llm-abstraction package (#2364)

2026-08-11 14:15:57 -04:00

test_templates.py

docs: salvage focused stale PR contributions

2026-05-11 05:31:12 -04:00

test_types.py

ci: add Python CI job (ruff, mypy, pytest) for the llm-abstraction package (#2364)

2026-08-11 14:15:57 -04:00