aelassas / servy / 26180208849

push

github

fix(service): EnvironmentVariableHelper.cs - ProtectedVariables omits PROGRAMFILES / PROGRAMFILES(x86) / COMMONPROGRAMFILES; user-supplied env vars can redirect %ProgramFiles% to a malicious path (#1843)
fix(core): ImportServiceCommand.cs - \?\UNC\ resolved-path prefix bypasses the post-handle UNC guard (#1837)
fix(core): ExportServiceCommand.cs - UNC exfiltration guards do not cover subst / DefineDosDevice mappings to remote shares (#1838)
fix(core): ProtectedKeyProvider.cs - Global\ Mutex created without explicit DACL; SYSTEM service and user Manager fall into separate Local\ mutexes and can race key generation (#1854)
fix(psm1): Format-SecureLogMessage regex breaks on values containing escaped quotes, leaking the tail of sensitive arguments (#1860)

1226 of 2251 branches covered (54.46%)

Branch coverage included in aggregate %.

58 of 76 new or added lines in 4 files covered. (76.32%)

8622 of 17247 relevant lines covered (49.99%)

423.33 hits per line