viyatb-oai f50c8b2f81 fix: unsafe auto-approval of git commands (#10258) ...

fixes https://github.com/openai/codex/issues/10160 and some more.

## Description

Hardens Git command safety to prevent approval bypasses for destructive
or write-capable invocations (branch delete, risky push forms,
output/config-override flags), so these commands no longer auto-run as
“safe.”

- `git branch -d` variants (especially in worktrees / with global
options like -C / -c)
- `git show|diff|log --output` ... style file-write flags
- risky Git config override flags (-c, --config-env) that can trigger
external execution
- dangerous push forms that weren’t fully caught (`--force*`,
`--delete`, `+refspec`, `:refspec`)
- grouped short-flag delete forms (e.g. stacked branch flags containing
`d/D`)

will fast follow with a common git policy to bring windows to parity.

---------

Co-authored-by: Eric Traut <etraut@openai.com>

2026-02-02 12:30:17 -08:00

..

is_dangerous_command.rs

fix: unsafe auto-approval of git commands (#10258)

2026-02-02 12:30:17 -08:00

is_safe_command.rs

fix: unsafe auto-approval of git commands (#10258)

2026-02-02 12:30:17 -08:00

mod.rs

Revert "Revert "Overhaul shell detection and centralize command generation for unified exec"" (#6607)

2025-11-13 16:45:17 -08:00

powershell_parser.ps1

fix: use PowerShell to parse PowerShell (#7607)

2025-12-12 13:06:49 -08:00

windows_dangerous_commands.rs

fix(core): require approval for force delete on Windows (#8590)

2026-01-20 15:25:27 -08:00

windows_safe_commands.rs

fix: use PowerShell to parse PowerShell (#7607)

2025-12-12 13:06:49 -08:00