jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-09 00:12:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): enforce delegated authority in local web fetches

Browse Source
This commit is contained in:
Alexandre Teixeira
2026-10-06 18:31:08 +01:00
parent c7961d178f
commit 82cfd7d69a
4 changed files with 263 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_external_context_tool_gate.py
+21
View File
@@ -112,6 +112,27 @@ def test_all_native_schema_tools_have_explicit_capabilities():
assert schema_names <= KNOWN_CAPABILITY_TOOLS
@pytest.mark.parametrize("tool,content,effects,integrity", [
("web_fetch", "/workspace/a.txt", {ToolEffect.READ_WORKSPACE}, ResultIntegrity.WORKSPACE_UNTRUSTED),
("web_fetch", {"url": "FILE:///workspace/a.txt"}, {ToolEffect.READ_WORKSPACE}, ResultIntegrity.WORKSPACE_UNTRUSTED),
("web_fetch", {"urls": ["/workspace/a.txt", {"url": "file:///workspace/b.txt"}]},
{ToolEffect.READ_WORKSPACE}, ResultIntegrity.WORKSPACE_UNTRUSTED),
("web_fetch", {"urls": ["https://example.com", {"url": "/workspace/a.txt"}]},
{ToolEffect.READ_WORKSPACE, ToolEffect.BROKERED_NETWORK_READ, ToolEffect.NETWORK_EGRESS}, ResultIntegrity.EXTERNAL_UNTRUSTED),
("web_fetch", {"url": "https://example.com/workspace/a.txt"},
{ToolEffect.BROKERED_NETWORK_READ, ToolEffect.NETWORK_EGRESS}, ResultIntegrity.EXTERNAL_UNTRUSTED),
("pdf_extract", {"path": "/workspace/a.pdf"}, {ToolEffect.READ_WORKSPACE}, ResultIntegrity.WORKSPACE_UNTRUSTED),
("pdf_extract", {"url": "https://example.com/a.pdf"},
{ToolEffect.BROKERED_NETWORK_READ}, ResultIntegrity.EXTERNAL_UNTRUSTED),
])
def test_web_reader_capabilities_follow_concrete_sources(tool, content, effects, integrity):
capability = capabilities_for_action(tool, content)
assert capability.effects == frozenset(effects)
assert capability.result_integrity == integrity
if isinstance(content, dict):
assert capabilities_for_action(tool, json.dumps(content)) == capability
def test_external_web_result_blocks_later_code_execution():
context = ToolRunSecurityContext()