John T. MyersandJohn Myers 13051df321 fix(policy): reject TLD wildcard patterns in network policy endpoints (#791) ...

TLD wildcards like *.com were accepted by policy validation but silently
failed at the proxy layer — 0 bytes returned, no denial logged. Now
rejected at submission time with a clear error message.

Closes #787

Co-authored-by: John Myers <johntmyers@users.noreply.github.com>

2026-04-09 13:11:35 -07:00

..

data

feat(sandbox): add L7 query parameter matchers (#617)

2026-03-30 13:53:12 -07:00

src

fix(policy): reject TLD wildcard patterns in network policy endpoints (#791)

2026-04-09 13:11:35 -07:00

testdata

feat(sandbox): auto-detect TLS and terminate unconditionally for credential injection (#544)

2026-03-23 18:45:18 -07:00

tests

fix(sandbox): relay WebSocket frames after HTTP 101 Switching Protocols (#718)

2026-04-01 21:39:41 -07:00

Cargo.toml

feat(sandbox): integrate OCSF structured logging for sandbox events (#720)

2026-04-07 13:01:13 -07:00