kenryu42/cc-safety-net v2.7.3

on GitHub

Remote curl and wget uploads are no longer blocked at the default Standard safety level and now block only at Strict and Paranoid, while recursive deletes with a variable or wildcard target are now blocked when the shell sits in your home directory.

Highlights

• Changed the remote-upload rule to strict-only, which clears false positives on read-only JSON-RPC, GraphQL, and webhook requests at Standard safety. (#325)
• Fixed recursive deletes with a variable or wildcard target being allowed at Standard safety when run from the home directory. (#324)

Changed

• Changed network.upload-remote to activate with the fail_closed capability, so curl and wget requests that send a body or upload a file to a remote host are blocked at Strict and Paranoid safety but allowed at Standard. Enable the rule explicitly to keep blocking them at Standard. Uploads of sensitive files such as .env are still blocked at every level by secret protection. (#325)
• Improved the Strict preset and Fail closed capability descriptions in the policy GUI to state that remote curl and wget uploads are blocked. (#325)

Fixed

• Fixed rm -rf "$X", Remove-Item -Recurse -Force $f, and cmd /c del /s /q *.log being allowed at Standard safety while the shell's current directory is the home directory. A dynamic delete target now reports the home-directory rule instead of falling through to the strict-only dynamic-target rule. (#324, #322)
• Fixed the opt-in Coding CLI config rules missing two project-level files that coding agents load: secret.cli.claude-code.config now covers <project>/.claude/settings.json and secret.cli.codex.config now covers <project>/.codex/config.toml. With the rule enabled, reads and writes of those paths are blocked through Write, Edit, MultiEdit, and shell redirects, heredocs, tee, and cp. Both rules remain off by default. (#323)
• Fixed Paranoid safety being weaker than Strict for script files on disk: the second analysis pass turned off every fail-closed rule, so a script containing an interpreter one-liner before a dangerous line was allowed at Paranoid even though Strict blocked it. The pass now turns off only the uncertain rules. (#325)