Skip to content

agent: Sandbox security review and docs update#60291

Open
cameron1024 wants to merge 18 commits into
mainfrom
sandbox-security-audit-and-docs
Open

agent: Sandbox security review and docs update#60291
cameron1024 wants to merge 18 commits into
mainfrom
sandbox-security-audit-and-docs

Conversation

@cameron1024

@cameron1024 cameron1024 commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Closes security loopholes and updates docs:

  • installs seccomp filter for blocking naughty syscalls
  • tightens macos seatbelt profile
  • fetch tool responses that redirect are now constrained by allowed domains list

Also adds a few "Learn More" buttons that link to the new docs.

Also fixes a bug where the agent would try to create a ~/.config/zed/AGENTS.md directory

Also adds unicode confusable detection to URL/path privilege escalation prompts.


Release Notes:

  • N/A or Added/Fixed/Improved ...

@cla-bot cla-bot Bot added the cla-signed The user has signed the Contributor License Agreement label Jul 2, 2026
@zed-community-bot zed-community-bot Bot added the staff Pull requests authored by a current member of Zed staff label Jul 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed The user has signed the Contributor License Agreement staff Pull requests authored by a current member of Zed staff

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant