Bump windows-sandbox to harden the residue sweep

Picks up the follow-up (3058fd1) that re-checks the system-root
invariant at sweep time: the crash-residue marker lives in the user's
%TEMP% and is untrusted, so a legacy or planted line naming System32 /
Program Files could previously drive the next run's sweep to strip the
broad built-in package SIDs from a system directory's factory ACLs. The
sweep now refuses system paths independently of the recorder-side
filter.
This commit is contained in:
SivanCola committed 2026-07-05 22:09:21 +08:00
1 parent 39bfc0b045
commit bd045b0dfd
4 files changed
+6 -6

No files matched your search

+1 -1
View File
@@ -25,7 +25,7 @@ require (
require (
git.sr.ht/~jackmordaunt/go-toast/v2 v2.0.3 // indirect
github.com/BurntSushi/toml v1.6.0 // indirect
github.com/SivanCola/windows-sandbox v0.0.0-20260705063922-1a3e77eb4310 // indirect
github.com/SivanCola/windows-sandbox v0.0.0-20260705140159-3058fd1bbf0f // indirect
github.com/aymanbagabas/go-udiff v0.4.1 // indirect
github.com/bep/debounce v1.2.1 // indirect
github.com/bmatcuk/doublestar/v4 v4.10.0 // indirect
+2 -2
View File
@@ -7,8 +7,8 @@ git.sr.ht/~jackmordaunt/go-toast/v2 v2.0.3 h1:N3IGoHHp9pb6mj1cbXbuaSXV/UMKwmbKLf
git.sr.ht/~jackmordaunt/go-toast/v2 v2.0.3/go.mod h1:QtOLZGz8olr4qH2vWK0QH0w0O4T9fEIjMuWpKUsH7nc=
github.com/BurntSushi/toml v1.6.0 h1:dRaEfpa2VI55EwlIW72hMRHdWouJeRF7TPYhI+AUQjk=
github.com/BurntSushi/toml v1.6.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho=
github.com/SivanCola/windows-sandbox v0.0.0-20260705063922-1a3e77eb4310 h1:VRA72LzaeSVtBI2eSvNFmulB3m862RS3mqo4Ps/o1LA=
github.com/SivanCola/windows-sandbox v0.0.0-20260705063922-1a3e77eb4310/go.mod h1:qL+ewlVGGeJLO97u+7E4K20gLu9oST/lc8FaGo2JJSw=
github.com/SivanCola/windows-sandbox v0.0.0-20260705140159-3058fd1bbf0f h1:Nl8VFxd09xBneXNGdRkLG1B0K4O9BzNuJI/PttsZGiM=
github.com/SivanCola/windows-sandbox v0.0.0-20260705140159-3058fd1bbf0f/go.mod h1:qL+ewlVGGeJLO97u+7E4K20gLu9oST/lc8FaGo2JJSw=
github.com/aymanbagabas/go-udiff v0.4.1 h1:OEIrQ8maEeDBXQDoGCbbTTXYJMYRCRO1fnodZ12Gv5o=
github.com/aymanbagabas/go-udiff v0.4.1/go.mod h1:0L9PGwj20lrtmEMeyw4WKJ/TMyDtvAoK9bf2u/mNo3w=
github.com/bep/debounce v1.2.1 h1:v67fRdBA9UQu2NhLFXrSg0Brw7CexQekrBwDMM8bzeY=
+1 -1
View File
@@ -10,7 +10,7 @@ require (
charm.land/lipgloss/v2 v2.0.4
git.sr.ht/~jackmordaunt/go-toast/v2 v2.0.3
github.com/BurntSushi/toml v1.6.0
github.com/SivanCola/windows-sandbox v0.0.0-20260705063922-1a3e77eb4310
github.com/SivanCola/windows-sandbox v0.0.0-20260705140159-3058fd1bbf0f
github.com/alecthomas/chroma/v2 v2.27.0
github.com/atotto/clipboard v0.1.4
github.com/aymanbagabas/go-udiff v0.4.1
+2 -2
View File
@@ -10,8 +10,8 @@ github.com/BurntSushi/toml v1.6.0 h1:dRaEfpa2VI55EwlIW72hMRHdWouJeRF7TPYhI+AUQjk
github.com/BurntSushi/toml v1.6.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho=
github.com/MakeNowJust/heredoc v1.0.0 h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ=
github.com/MakeNowJust/heredoc v1.0.0/go.mod h1:mG5amYoWBHf8vpLOuehzbGGw0EHxpZZ6lCpQ4fNJ8LE=
github.com/SivanCola/windows-sandbox v0.0.0-20260705063922-1a3e77eb4310 h1:VRA72LzaeSVtBI2eSvNFmulB3m862RS3mqo4Ps/o1LA=
github.com/SivanCola/windows-sandbox v0.0.0-20260705063922-1a3e77eb4310/go.mod h1:qL+ewlVGGeJLO97u+7E4K20gLu9oST/lc8FaGo2JJSw=
github.com/SivanCola/windows-sandbox v0.0.0-20260705140159-3058fd1bbf0f h1:Nl8VFxd09xBneXNGdRkLG1B0K4O9BzNuJI/PttsZGiM=
github.com/SivanCola/windows-sandbox v0.0.0-20260705140159-3058fd1bbf0f/go.mod h1:qL+ewlVGGeJLO97u+7E4K20gLu9oST/lc8FaGo2JJSw=
github.com/alecthomas/assert/v2 v2.11.0 h1:2Q9r3ki8+JYXvGsDyBXwH3LcJ+WK5D0gc5E8vS6K3D0=
github.com/alecthomas/assert/v2 v2.11.0/go.mod h1:Bze95FyfUr7x34QZrjL+XP+0qgp/zg8yS+TtBj1WA3k=
github.com/alecthomas/chroma/v2 v2.27.0 h1:FodwmyOBgJULFYmDqibcp9pvfDLWdtPRh9v/r5BXYZs=