Skip to content

fix: sanitize .lf filter env, utf-8 truncate panic - #17

Closed
zdk wants to merge 1 commit into
mainfrom
fix/hardening-and-ci
Closed

fix: sanitize .lf filter env, utf-8 truncate panic#17
zdk wants to merge 1 commit into
mainfrom
fix/hardening-and-ci

Conversation

@zdk

@zdk zdk commented Aug 17, 2026

Copy link
Copy Markdown
Owner
  • .lf shell:/python: filters run with env_clear + allowlist (sanitized_env moved to lowfat-core, re-exported by lowfat-plugin)
  • proc_token_budget: back cut up to char boundary (panic on multibyte)
  • main: print {e:#} context chain reaches users
  • add CI workflow: fmt, clippy -D warnings, tests on ubuntu + macos
  • clear all clippy warnings; regression tests for env leak + UTF-8
  • CONTRIBUTING: docker for Linux test

Comment thread .github/workflows/ci.yml Fixed
@zdk zdk changed the title fix: sanitize .lf filter env, UTF-8 truncation panic, error context; … fix: sanitize .lf filter env, utf-8 truncate panic Aug 17, 2026
…add CI

- .lf shell:/python: filters now run with env_clear + allowlist
  (sanitized_env moved to lowfat-core, re-exported by lowfat-plugin)
- proc_token_budget: back cut up to char boundary (panic on multibyte)
- main: print {e:#} so anyhow context chain reaches users
- add CI workflow: fmt, clippy -D warnings, tests on ubuntu + macos
- clear all clippy warnings; regression tests for env leak + UTF-8
- CONTRIBUTING: docker one-liner for Linux runs, five crates not four
@zdk
zdk force-pushed the fix/hardening-and-ci branch from 5e46361 to c4ab10d Compare August 17, 2026 08:19
@zdk zdk closed this Aug 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants