fix(security): pentest remediation — condition escaping, SSRF hardening, ReDoS protection - #3820

Merged

waleedlatif1 merged 7 commits into

waleedlatif1/assess-pentest-finding

Mar 28, 2026

Commits on Mar 28, 2026

fix(executor): escape newline characters in condition expression strings
waleedlatif1
and
claude
committed
026bc76
fix(security): prevent ReDoS in guardrails regex validation
waleedlatif1
and
claude
committed
f1fc068
fix(security): SSRF localhost hardening and regex DoS protection
waleedlatif1
and
claude
committed
ccaa49d
fix(security): validate regex syntax before safety check
waleedlatif1
and
claude
committed
34be2a7
fix(security): address PR review feedback
waleedlatif1
committed
8d03be3
fix(security): remove input length cap from regex validation
waleedlatif1
and
claude
committed
f63d1c6
fix(tests): mock isHosted in input-validation and function-execute tests
waleedlatif1
and
claude
committed
301f9be