Harden URL reads and XML serialization - #343

Merged

vinitkumar merged 10 commits into

agent/harden-untrusted-input

Jul 19, 2026

Commits on Jul 19, 2026

fix: bound and validate remote JSON reads
vinitkumar
committed
1cb7451
fix: reject unsafe XML output
vinitkumar
committed
b4f7b53
chore: sync Python security dependencies
vinitkumar
committed
0145f16
fix: disable unsafe Rust accelerators
vinitkumar
committed
980ec34
docs: explain secure URL reader defaults
vinitkumar
committed
a73ba85
test: cover hardened failure paths
vinitkumar
committed
fdb8f5d
docs: explain XML invalid character ranges
vinitkumar
committed
36b3a11
docs: link XML character specification
vinitkumar
committed
9017e03
test: validate custom type attribute characters
vinitkumar
committed
d736794
fix: replace ambiguous XML character regex
vinitkumar
committed
bf27193