Gemini CLI PR hardens workspace path boundaries and symlink checks across command safety
jesussamuel-byte · ghdev · 2026-09-03
A community PR (#29170) on google-gemini/gemini-cli systematically strengthens workspace boundary enforcement and symlink resolution across command safety heuristics, file discovery, and directory listing on POSIX and Windows.
- POSIX command safety: file-reading utilities (cat, grep, find, etc.) now check arguments with isPathEscapingWorkspace to block escapes outside the workspace root or via symlinks; unresolvable shell variables and expansions are treated as unsafe.
- Symlink commands: ln -s invocations now require confirmation before creating links.
- Windows: matching checks for dir, type, get-content, and more.
- Architecture: SandboxManager implementations propagate cwd alongside the workspace root so PolicyEngine.applyShellHeuristics gets effective directory context; FileDiscoveryService ignores links resolving outside the project root.
A useful reference implementation of path-boundary defenses for anyone building coding-agent sandboxes.
More from coding & agent
- LLM one-shots a Minecraft 3x3 piston door by building its own Linux test infra — Vjeux · 2026-10-18
- Dev builds Mumbai-inspired 3D manga background generator from OpenStreetMap data — CurieuxExplorer · 2026-10-18
- Solo founder builds a money-printing data service on Claude's Pi Durable harness — MicahBerkley · 2026-10-18
- Dev builds Arch-based OS with custom desktop and browser using Claude Code — Snoo-10493 · 2026-10-18
- Five SaaS agent workflows fail the same way — and it's never model intelligence — usehive · 2026-10-18
- Claude skill generates hand-drawn interactive diagrams that teach kids how things work — CatAstro_Piyush · 2026-10-18