fix: harden machine federation boundaries

2026-05-28 20:49:25 +02:00
parent e352dce6ef
commit 5e2afc1ffa
18 changed files with 623 additions and 106 deletions
@@ -0,0 +1,17 @@
+import { describe, expect, it } from "vitest";
+import { sanitizedGitEnv } from "./gitEnv.js";
+
+describe("sanitizedGitEnv", () => {
+  it("removes repository-local Git variables inherited from hooks", () => {
+    const env = sanitizedGitEnv({
+      PATH: "/bin",
+      GIT_DIR: "/repo/.git",
+      GIT_WORK_TREE: "/repo",
+      GIT_INDEX_FILE: "/repo/.git/index.lock",
+      GIT_PREFIX: "src/",
+      GIT_COMMON_DIR: "/repo/.git",
+    });
+
+    expect(env).toEqual({ PATH: "/bin" });
+  });
+});