Search results

Explicit proxy silently drops busybox-style absolute https:// forward requests (no response, no approval card, no audit)

Status: Open.

#31 In lensapp/lens-sandbox-core;

· chenhunghan opened on Jun 30, 2026

policy: pin the runtime default-transport parser to the Transport enum (same drift risk #26 closed for Verdict)

enhancementNew feature or requestNew feature or request

Status: Open.

#28 In lensapp/lens-sandbox-core;

· jansav opened on Jun 18, 2026

DNS: scrub HTTPS/SVCB records from forwarded responses, not just direct queries

enhancementNew feature or requestNew feature or request

Status: Open.

#27 In lensapp/lens-sandbox-core;

· jansav opened on Jun 18, 2026

Sandbox proxy drops all non-HTTP/non-TLS TCP egress as unknown-protocol (no raw-TCP passthrough) — blocks DB/SSH/Redis clients

Status: Open.

#16 In lensapp/lens-sandbox-core;

· jansav opened on Jun 8, 2026

Privilege drop clears supplementary groups; arbitrary-uid-in-root-group images (bitnami/OpenShift) can't write group-0 dirs

Status: Open.

#15 In lensapp/lens-sandbox-core;

· jansav opened on Jun 5, 2026

Dual-stack interception: intercept IPv6 egress properly instead of suppressing AAAA

enhancementNew feature or requestNew feature or request

Status: Open.

#14 In lensapp/lens-sandbox-core;

· jansav opened on Jun 4, 2026