Apply security-hardening patch set - #22

Closed

rdasilveiracabral wants to merge 6 commits into

mainfrom

cursor/apply-security-hardening-patches-44e0

Commits on Jul 25, 2026

security: constrain playground model endpoint/api-key boundary

cursoragent
and
rdasilveiracabral
committed
6a68178
security: harden viewer access + bound OTLP/journal ingest

cursoragent
and
rdasilveiracabral
committed
bb84e8f
security: sandbox-by-default CodeAct, restrict host imports, scrub worker env, enforce broker visibility

cursoragent
and
rdasilveiracabral
committed
2e77e98
style: apply ruff format to patched files

cursoragent
and
rdasilveiracabral
committed
8f8e67d
test: update default-value assertions for sandbox-by-default, 30s cell_timeout, and populated DEFAULT_RESTRICTED_IMPORTS

cursoragent
and
rdasilveiracabral
committed
5434fb8
test: pin in-process-semantics tests to execution_backend=inprocess

cursoragent
and
rdasilveiracabral
committed
137564e