Repository navigation

Security audit and hardening pass across all Chronos packages - #16

Merged

cursor[bot] merged 10 commits into

mainfrom

cursor/chronos-security-hardening-6239

Aug 9, 2026

Merged

Security audit and hardening pass across all Chronos packages#16
cursor[bot] merged 10 commits into
mainfrom
cursor/chronos-security-hardening-6239

Commits on Aug 9, 2026
- fix(core): remove string-handler eval sink from strict-mode setTimeout
  
  cursoragent
  and
  sx4im
  committed
  db03c5a
- fix(vitest): validate the whole capsule at the trust boundary
  
  cursoragent
  and
  sx4im
  committed
  987e487
- fix(cli): sanitize untrusted capsule text at every render sink
  
  cursoragent
  and
  sx4im
  committed
  fd4978b
- fix(inspector): bound and validate untrusted capsules before rendering
  
  cursoragent
  and
  sx4im
  committed
  2af4228
- chore: add security headers and least-privilege CI
  
  cursoragent
  and
  sx4im
  committed
  805f5c3
- test: regression coverage for every fixed vulnerability
  
  cursoragent
  and
  sx4im
  committed
  97527b1
- docs: document the security model and fix stale references
  
  cursoragent
  and
  sx4im
  committed
  ae09cdc
- fix(inspector): keep core out of the browser bundle; harden escape stripping
  
  cursoragent
  and
  sx4im
  committed
  0565c25
- docs: add security headers to the docs site and a Security section to the README
  
  cursoragent
  and
  sx4im
  committed
  748ff94
- fix(cli): close CSV formula-injection bypass via invisible and whitespace leads
  
  cursoragent
  and
  sx4im
  committed
  597e83f