3 people 44d359bd05 fix(javascript): omit effects refused by host construction (#11122) ...

Filter child-process, fetch/WebSocket and TLS effects for literal calls
the host refuses to construct. Share copied child options across validation
and projection, preserving uncertainty from own and inherited getters.
Includes the original implementations from #10528, #10529 and #10530.

Validation: 394 domain/public CLI/MCP tests, then 54 request/public tests after the
review correction, static checks and discovery passed. Also verified 29
Node 24.22.1 probes and actual Chromium 156 header/Request constructors.
Full browser app/network behavior was not tested. Analysis does not execute
target source.

Fixes #10522
Fixes #10523
Fixes #10524
Related: #10528, #10529, #10530

Co-authored-by: RRFZ <247457381+Plastic-time@users.noreply.github.com>
Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com>

2026-11-15 21:05:27 +08:00

..

android

refactor(android): take the host in JADX configuration, doctor and workspace roots (#11086)

2026-11-15 20:52:58 +08:00

application

test(desktop): require gzip export root removal (#9988)

2026-11-11 17:12:44 +08:00

binaryDiagnostics

refactor(providers): classify raw provider failures through one owner (#10757)

2026-11-15 16:28:42 +08:00

browser

fix(electron): refuse captures handed off to an already-running app (#10989)

2026-11-15 20:35:48 +08:00

captures

feat(pcap): read tshark JSON packets through one envelope owner with an adjustable expansion bound (#10788)

2026-11-15 16:17:24 +08:00

cli

fix(javascript): omit effects refused by host construction (#11122)

2026-11-15 21:05:27 +08:00

evm

fix(apktool): report the decoder JVM's heap exhaustion as memory, not a target refusal (#10634)

2026-11-15 15:11:31 +08:00

filesystem

feat(artifacts): name the integrity check for target digests, Apple bundle readers and extraction (#11125)

2026-11-15 21:05:00 +08:00

firmware

refactor(wasm): leave WABT cancellation to the shared owners (#10796)

2026-11-15 17:42:49 +08:00

go

refactor(parsers): select once-only sections and JSON fields through one keyed owner (#10740)

2026-11-15 13:44:59 +08:00

gpu

fix(gpu): report malformed GPU containers as invalid_format (#10644)

2026-11-14 18:57:45 -05:00

il2cpp

fix(il2cpp): resolve ELF ABS64 and GLOB_DAT image definitions (#11075)

2026-11-15 19:55:43 +08:00

inspector

feat(evidence)!: require JavaScript, browser, managed and reference-source facts their producers always write (#10990)

2026-11-15 19:37:10 +08:00

investigation

feat(investigation)!: retain records across engine cleanup (#8361)

2026-10-31 21:34:45 +00:00

javascript

feat(evidence)!: require JavaScript, browser, managed and reference-source facts their producers always write (#10990)

2026-11-15 19:37:10 +08:00

javascript-recovery

test: remove per-test deadlines owned by project policy

2026-11-14 05:27:07 +08:00

mcp

feat(artifacts): name the integrity check for target digests, Apple bundle readers and extraction (#11125)

2026-11-15 21:05:00 +08:00

model

fix(model): report malformed GGUF and Safetensors headers as invalid_format through ParseFailure (#10667)

2026-11-14 18:58:59 -05:00

native

refactor(process): require the platform for environment snapshots instead of reading the host (#11028)

2026-11-15 18:33:23 +08:00

pcap

test: replace pcap, web-worker and Rizin sleeps with ordering barriers (#10994)

2026-11-15 18:01:43 +08:00

process

refactor(android): take the host in JADX configuration, doctor and workspace roots (#11086)

2026-11-15 20:52:58 +08:00

providers

feat(artifacts): name the integrity check for target digests, Apple bundle readers and extraction (#11125)

2026-11-15 21:05:00 +08:00

rust

refactor(rust): report cargo-auditable section failures through ParseFailure (#10652)

2026-11-14 15:28:33 -05:00

setup

fix(setup): say when an authentic Hopper package mismatches its feed hash

2026-11-14 05:36:32 +01:00

signals

test: verify CLI failure status and cancellation stage ownership

2026-11-10 16:50:24 -05:00

sqlite

refactor(desktop): let build-computer and agentenv cleanup errors read their owner's release (#10855)

2026-11-15 20:06:47 +08:00

goRustSubjectArchitecture.test.ts

fix(native): select same-family universal slices by subtype name

2026-11-14 12:13:56 +01:00

guidanceSearch.test.ts

docs(mcp): clarify Ghidra edit lifetime on switches (#8484)

2026-11-07 19:50:51 +00:00

idaStartupDiagnostics.test.ts

refactor(ida): require the host platform for IDA MCP connections and snapshot the child environment with it (#11073)

2026-11-15 19:51:33 +08:00

javascriptSemanticTraceEvidence.test.ts

perf(tests): reduce repeated schema compilation and CLI startup

2026-11-09 08:40:39 +08:00