Unified · Split
| @@ -0,0 +1,7 @@ | |||
| 1 | --- | ||
| 2 | "executor": patch | ||
| 3 | --- | ||
| 4 | |||
| 5 | Google media downloads (Drive file contents, exports, and other binary | ||
| 6 | endpoints) are now returned as binary responses instead of being decoded as | ||
| 7 | text, so files come back intact. Emit them with `emit(result.data)`. | ||
| @@ -0,0 +1,9 @@ | |||
| 1 | --- | ||
| 2 | "executor": patch | ||
| 3 | --- | ||
| 4 | |||
| 5 | The CLI now validates that a URL is `http`/`https` before handing it to the | ||
| 6 | operating system's browser opener, and on Windows opens it via | ||
| 7 | `rundll32 url.dll,FileProtocolHandler` instead of `cmd /c start`. This removes a | ||
| 8 | path where a crafted URL could be interpreted as a shell command. `executor | ||
| 9 | login` and the "open in browser" prompts behave the same for normal URLs. | ||
| @@ -0,0 +1,9 @@ | |||
| 1 | --- | ||
| 2 | "executor": patch | ||
| 3 | --- | ||
| 4 | |||
| 5 | Hardened the hosted egress guard. Outbound requests from OAuth token exchanges, | ||
| 6 | MCP transports, and GraphQL/Google/Microsoft discovery now all route through the | ||
| 7 | guard, and the guard resolves DNS before connecting so a hostname that points at | ||
| 8 | a private or loopback address is blocked rather than only literal private IPs. | ||
| 9 | This tightens SSRF protection for hosted and cloud execution. | ||