# agent: More sandboxing changes \(\#60111\) · gitcafe/zed

[View on GitCafe](https://git.cafe/gitcafe/zed/commit/4a99aa870e3e96a5350b7d707da344ca8e9a21df)

Repository: [gitcafe/zed](https://git.cafe/gitcafe/zed)

Visibility: public

Requested revision: 4a99aa870e3e96a5350b7d707da344ca8e9a21df

Requested commit: 4a99aa870e3e96a5350b7d707da344ca8e9a21df

Commit: 4a99aa870e3e96a5350b7d707da344ca8e9a21df

Tree: ec7667312a4d82043f3d558fb370720639d972ce

Author: Cameron Mcloughlin

Committer: GitHub

## Message

```
agent: More sandboxing changes (#60111)

Large change to sandboxing:
- fixes a nasty TOCTOU relating to a symlink swap attack, documented in
the `sandboxing/README.md`
- Adds UI and restrictions when in an untrusted workspace
- Adds tests for (soon to be removed) git support


---

Release Notes:

- N/A or Added/Fixed/Improved ...
```

## Parents

- [38562721884c73fd8c60af3d1cf00550d72a6a6c](https://git.cafe/gitcafe/zed/commit/38562721884c73fd8c60af3d1cf00550d72a6a6c?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zed/tree/4a99aa870e3e96a5350b7d707da344ca8e9a21df?format=markdown)