What: The entire sandbox wrapping system has been disabled, causing all commands to run without filesystem or network restrictions.
Details:
- The sandbox wrapper function
nx6()at line 375662 now returns early, bypassing all sandbox logic - Both macOS (
sandbox-exec) and Linux (bwrap) sandboxing are non-functional - Commands execute with full system access instead of isolated environments
- This appears to be a temporary disable, likely for debugging or testing purposes
- Evidence:
nx6()at line 375662 returns input unchanged, making all subsequent sandbox code unreachable
Impact: Users expecting sandboxed execution will have NO security isolation in this version. Commands run with full system privileges.