Unified · Split
| @@ -0,0 +1,7 @@ | ||
| 1 | +--- | |
| 2 | +"executor": patch | |
| 3 | +--- | |
| 4 | + | |
| 5 | +Google media downloads (Drive file contents, exports, and other binary | |
| 6 | +endpoints) are now returned as binary responses instead of being decoded as | |
| 7 | +text, so files come back intact. Emit them with `emit(result.data)`. | |
| @@ -0,0 +1,9 @@ | ||
| 1 | +--- | |
| 2 | +"executor": patch | |
| 3 | +--- | |
| 4 | + | |
| 5 | +The CLI now validates that a URL is `http`/`https` before handing it to the | |
| 6 | +operating system's browser opener, and on Windows opens it via | |
| 7 | +`rundll32 url.dll,FileProtocolHandler` instead of `cmd /c start`. This removes a | |
| 8 | +path where a crafted URL could be interpreted as a shell command. `executor | |
| 9 | +login` and the "open in browser" prompts behave the same for normal URLs. | |
| @@ -0,0 +1,9 @@ | ||
| 1 | +--- | |
| 2 | +"executor": patch | |
| 3 | +--- | |
| 4 | + | |
| 5 | +Hardened the hosted egress guard. Outbound requests from OAuth token exchanges, | |
| 6 | +MCP transports, and GraphQL/Google/Microsoft discovery now all route through the | |
| 7 | +guard, and the guard resolves DNS before connecting so a hostname that points at | |
| 8 | +a private or loopback address is blocked rather than only literal private IPs. | |
| 9 | +This tightens SSRF protection for hosted and cloud execution. | |