陈志谦 fdf937177d fix(security): authenticate sandbox executor API and isolate container network (#18703) ...

Fix sandbox security gaps: (1) add token auth + rate limiter to POST /run, bind port to localhost; (2) default containers to --network none. Backward compatible. Tests pass, docs updated.

---------

Co-authored-by: jindou <jindou@local>

2026-08-26 19:26:28 +08:00

..

api

fix(security): authenticate sandbox executor API and isolate container network (#18703)

2026-08-26 19:26:28 +08:00

core

fix(security): authenticate sandbox executor API and isolate container network (#18703)

2026-08-26 19:26:28 +08:00

models

Refa: refine code_exec component (#13925)

2026-04-07 11:48:29 +08:00

services

fix(security): authenticate sandbox executor API and isolate container network (#18703)

2026-08-26 19:26:28 +08:00

tests

fix(security): authenticate sandbox executor API and isolate container network (#18703)

2026-08-26 19:26:28 +08:00

utils

feat: Implement pluggable multi-provider sandbox architecture (#12820)

2026-01-28 13:28:21 +08:00

Dockerfile

feat: make sandbox Dockerfile mirrors optional with ARG (#14553)

2026-05-11 11:01:43 +08:00

main.py

feat: Implement pluggable multi-provider sandbox architecture (#12820)

2026-01-28 13:28:21 +08:00

pytest.ini

fix(security): authenticate sandbox executor API and isolate container network (#18703)

2026-08-26 19:26:28 +08:00

requirements.txt

feat: Implement pluggable multi-provider sandbox architecture (#12820)

2026-01-28 13:28:21 +08:00

seccomp-profile-default.json

feat: Implement pluggable multi-provider sandbox architecture (#12820)

2026-01-28 13:28:21 +08:00

util.py

feat: Implement pluggable multi-provider sandbox architecture (#12820)

2026-01-28 13:28:21 +08:00