runbgp bc41b2ed3e fix(robomp): refused token-bearing git ops to attacker-controlled origins ...

- Extracted `_pat_safe_remote` and rejected HTTP(S) origins with embedded credentials or mismatched host/repo.
- Guarded `clone` via `_assert_clone_url_safe` on the caller-supplied `clone_url` (pool has no `origin` yet).
- Asserted origin safety before `fetch`, `fetch_ref`, and `fetch_pr_head` inject the PAT header.
- Appended POSIX `--` separator in `omp_local` so prompts starting with `-` aren't parsed as flags.
- Added proxy tests covering attacker-origin fetch rejection and unsafe `clone_url` refusal.

Co-authored-by: can1357 <me@can.ac>

2026-06-23 19:57:15 +02:00

..

omp-rpc

feat(python/omp-rpc): added effort-based model thinking config parsing

2026-06-14 08:34:38 +02:00

robomp

fix(robomp): refused token-bearing git ops to attacker-controlled origins

2026-06-23 19:57:15 +02:00