KarpelesLab / bnpm / 26193907419

12%

Build Type

push

github

Committed by MagicalTux

Commit Message

Fix CIDR containment in network allow list, add claude-hardened profile

The IP allow list parsed CIDR entries with ParsePrefix but stored only
pfx.Addr() in the same map as bare addresses, so "10.0.0.0/8" matched
only 10.0.0.0 and nothing else in the range. Split prefixes into their
own []netip.Prefix and check with Contains. Add regression test.

Add claude-hardened profile (opt-in via --profile claude-hardened) that
removes attack surface from claude-full:
  - no ~/.ssh bind mount, no SSH_AUTH_SOCK passthrough
  - no ~/.config mount (prevents writing ~/.config/bnpm/config.toml to
    broaden the sandbox on the next run via user-profile precedence)
  - no ~/.npm / ~/.npm-global (no install-cache tampering)
  - drops *.sentry.io, *.google.com, *.googleapis.com, marketplace and
    CDN wildcards that double as TLS-tunneled exfil channels
  - tightens GitHub to non-wildcard hostnames

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Coverage Stats

10 of 12 new or added lines in 1 file covered. (83.33%)

1 existing line in 1 file now uncovered.

130 of 1130 relevant lines covered (11.5%)

1.05 hits per line