thzxx

thzxx closed issue MetonaTeam/metona-ai-desktop#22

2026-07-22 09:42:56 +08:00

[P1/高] CodeSearchTool ripgrep pattern 未转义，可注入命令行选项

thzxx commented on issue MetonaTeam/metona-ai-desktop#22

2026-07-22 09:42:55 +08:00

[P1/高] CodeSearchTool ripgrep pattern 未转义，可注入命令行选项

修复说明

文件: electron/harness/tools/built-in/code-search.ts

修复: ripgrep 参数中在 pattern 前插入 -- 终止选项解析，防止以 - 开头的 pattern 被解释为 ripgrep 选项（如…

thzxx closed issue MetonaTeam/metona-ai-desktop#21

2026-07-22 09:42:55 +08:00

[P1/高] SearchFilesTool walkDir 递归无深度限制，可触发栈溢出或长时间阻塞

thzxx commented on issue MetonaTeam/metona-ai-desktop#21

2026-07-22 09:42:54 +08:00

[P1/高] SearchFilesTool walkDir 递归无深度限制，可触发栈溢出或长时间阻塞

修复说明

文件: electron/harness/tools/built-in/filesystem.ts

修复: walkDir 新增 depth/maxDepth(默认 20)/visited 参数。深度超限立即返回防止栈溢出；realpathSync 去重防止符号…

thzxx closed issue MetonaTeam/metona-ai-desktop#20

2026-07-22 09:42:53 +08:00

[P1/高] DeleteFileTool TOCTOU 竞态，存在检查与删除之间可被替换

thzxx commented on issue MetonaTeam/metona-ai-desktop#20

2026-07-22 09:42:53 +08:00

[P1/高] DeleteFileTool TOCTOU 竞态，存在检查与删除之间可被替换

修复说明

文件: electron/harness/tools/built-in/filesystem.ts

修复: DeleteFileTool.execute 添加 TOCTOU 防护：删除前 realpathSync 记录 realBefore 并校验工作空间内，stat 后再次…

thzxx closed issue MetonaTeam/metona-ai-desktop#19

2026-07-22 09:42:52 +08:00

[P1/高] GitDiffTool pathspec 未校验工作空间内，可读取任意仓库差异

thzxx commented on issue MetonaTeam/metona-ai-desktop#19

2026-07-22 09:42:51 +08:00

[P1/高] GitDiffTool pathspec 未校验工作空间内，可读取任意仓库差异

修复说明

文件: electron/harness/tools/built-in/git.ts

修复: GitDiffTool.execute 中对 pathspec 做 resolve + isPathWithinWorkspace 校验，越界时返回错误，防止 `../../../other-re…

thzxx closed issue MetonaTeam/metona-ai-desktop#18

2026-07-22 09:42:51 +08:00

[P1/高] ConfirmationHook waitForConfirmation 超时竞态条件

thzxx commented on issue MetonaTeam/metona-ai-desktop#18

2026-07-22 09:42:50 +08:00

[P1/高] ConfirmationHook waitForConfirmation 超时竞态条件

修复说明

文件: electron/harness/hooks/confirmation-hook.ts

修复: 采用 settled 标志 + safeResolve 包装：超时分支与确认分支互斥，先到者赢，另一分支直接 return。解决超时回调已入队时…

thzxx commented on issue MetonaTeam/metona-ai-desktop#17

2026-07-22 09:42:49 +08:00

[P1/高] AuditLogHook 未 try-catch，异常会中断工具执行链

修复说明

文件: electron/harness/hooks/post-tool.ts

修复: AuditLogHook.afterExecute 添加 try-catch。工单描述的文件 audit-log-hook.ts 不存在，AuditLogHook 实际定义在 post-tool.ts…

thzxx closed issue MetonaTeam/metona-ai-desktop#17

2026-07-22 09:42:49 +08:00

[P1/高] AuditLogHook 未 try-catch，异常会中断工具执行链

thzxx closed issue MetonaTeam/metona-ai-desktop#16

2026-07-22 09:42:48 +08:00

[P1/高] PromptInjectionDefender 未检测 Unicode 同形字符与零宽字符

thzxx commented on issue MetonaTeam/metona-ai-desktop#16

2026-07-22 09:42:47 +08:00

[P1/高] PromptInjectionDefender 未检测 Unicode 同形字符与零宽字符

修复说明

文件: electron/harness/security/prompt-injection-defense.ts

修复: 新增 normalizeForDetection 方法（NFKC 归一化 + 移除零宽字符 U+200B/C/D/U+00AD/U+FEFF），detect/`detectS…

thzxx closed issue MetonaTeam/metona-ai-desktop#15

2026-07-22 09:42:47 +08:00

[P1/高] PromptInjectionDefender 单词边界缺失，关键词易被绕过

thzxx commented on issue MetonaTeam/metona-ai-desktop#15

2026-07-22 09:42:46 +08:00

[P1/高] PromptInjectionDefender 单词边界缺失，关键词易被绕过

修复说明

文件: electron/harness/security/prompt-injection-defense.ts

修复: 为所有英文关键词注入模式添加 \b 单词边界（如 \bignore\s+...\binstructions?\b），防止 `Xignore previous…

thzxx closed issue MetonaTeam/metona-ai-desktop#14

2026-07-22 09:42:45 +08:00

[P1/高] PolicyEngine JSON.stringify 后正则匹配易被绕过

thzxx closed issue MetonaTeam/metona-ai-desktop#13

2026-07-22 09:42:44 +08:00

[P1/高] Sandbox scanCode 漏掉 require('fs') 和动态 import，可绕过沙箱

thzxx commented on issue MetonaTeam/metona-ai-desktop#14

2026-07-22 09:42:44 +08:00

[P1/高] PolicyEngine JSON.stringify 后正则匹配易被绕过

修复说明

文件: electron/harness/sandbox/permissions.ts

修复: 新增 deepScanStrings 私有方法递归提取对象所有字符串字段值。checkAuthorization 中 deniedPatterns/allowedPatterns…

thzxx commented on issue MetonaTeam/metona-ai-desktop#13

2026-07-22 09:42:43 +08:00

[P1/高] Sandbox scanCode 漏掉 require('fs') 和动态 import，可绕过沙箱

修复说明

文件: electron/harness/sandbox/sandbox.ts

修复: 新增 6 个危险模式检测：require('fs')、动态 `import('fs'