aelassas / servy / 26180214195

push

github

fix(service): EnvironmentVariableHelper.cs - ProtectedVariables omits PROGRAMFILES / PROGRAMFILES(x86) / COMMONPROGRAMFILES; user-supplied env vars can redirect %ProgramFiles% to a malicious path
fix(core): ImportServiceCommand.cs - \?\UNC\ resolved-path prefix bypasses the post-handle UNC guard
fix(core): ExportServiceCommand.cs - UNC exfiltration guards do not cover subst / DefineDosDevice mappings to remote shares
fix(core): ProtectedKeyProvider.cs - Global\ Mutex created without explicit DACL; SYSTEM service and user Manager fall into separate Local\ mutexes and can race key generation
fix(psm1): Format-SecureLogMessage regex breaks on values containing escaped quotes, leaking the tail of sensitive arguments

1232 of 2223 branches covered (55.42%)

Branch coverage included in aggregate %.

49 of 67 new or added lines in 4 files covered. (73.13%)

8736 of 17318 relevant lines covered (50.44%)

373.15 hits per line