fix(exec): only set security=full when elevated mode is full (#1616)
This commit is contained in:
@@ -791,7 +791,7 @@ export function createExecTool(
|
|||||||
const configuredSecurity = defaults?.security ?? (host === "sandbox" ? "deny" : "allowlist");
|
const configuredSecurity = defaults?.security ?? (host === "sandbox" ? "deny" : "allowlist");
|
||||||
const requestedSecurity = normalizeExecSecurity(params.security);
|
const requestedSecurity = normalizeExecSecurity(params.security);
|
||||||
let security = minSecurity(configuredSecurity, requestedSecurity ?? configuredSecurity);
|
let security = minSecurity(configuredSecurity, requestedSecurity ?? configuredSecurity);
|
||||||
if (elevatedRequested) {
|
if (elevatedRequested && elevatedMode === "full") {
|
||||||
security = "full";
|
security = "full";
|
||||||
}
|
}
|
||||||
const configuredAsk = defaults?.ask ?? "on-miss";
|
const configuredAsk = defaults?.ask ?? "on-miss";
|
||||||
|
|||||||
Reference in New Issue
Block a user