Skip to content

v0.3.3 — security hardening + review fixes

Latest
Latest

Choose a tag to compare

View all tags
@garyblankenship garyblankenship released this 12 Apr 00:33
v0.3.3
72991eb

What's changed

Post-review hardening pass on top of v0.3.2's prompt optimization work.

Security

  • web_fetch SSRF defense: reject URLs targeting loopback (127.*, ::1, localhost), link-local metadata (169.254.* including cloud-metadata 169.254.169.254), and RFC1918 private ranges (10.*, 192.168.*, 172.16–31.*, fc*/fd*). Reduced --max-redirs from 5 → 3 (note: defense is best-effort — curl does not re-validate redirect targets).

Bug fixes

  • call_api: replaced globally-scoped RETURN trap with explicit rm -f "$auth_file" after curl. The trap was firing on every subsequent function return across the script, stomping $auth_file state.
  • Typo detector false-positives: tightened from the previous same-first-3/±2-char heuristic to strict prefix truncation only. Words like helper, held, configure no longer get rejected with "did you mean 'help'?". sess → sessions, hel → help, and other genuine truncations still work.
  • manage_context: switched summary-input cap from head -c 8000 (byte-based, could split a multi-byte UTF-8 rune) to head -n 200 (line-based, UTF-8 safe).

Code quality

  • is_binary: simplified fragile $(...) && [[ ]] && return 0 || true chain into direct [[ ]] && return 0 checks.
  • read_file: dropped dead || echo 0 guards on wc -l and grep -c '' (never triggered).
  • resume: removed redundant ${SESSION_ID%%--*} double-strip.
  • run_format_hook: documented FORMAT_CMD trust boundary (user-owned, chmod 600 config).

Version bump: SHOOP_VERSION → 0.3.3

v0.3.2 content (not separately released, folded here):

  • Optimized system prompt, CRISP rewriter, and context summarizer with truncation awareness, denial handling, and error recovery guidance.
Assets 2
Loading