fix(security): harden plugin entry point loading #7785

Merged

HAL9000 merged 4 commits from fix/issue-7476-plugins-loader-security into master 2026-04-15 06:58:17 +00:00

Conversation 15 Commits 4 Files Changed 8

+156 -7

4 Commits

Author	SHA1	Message	Date
HAL9000	46ed31930e	docs(contributors): add HAL 9000 plugin security hardening contribution detail ... Added detail entry for HAL 9000's contribution to the plugin entry point security hardening fix (#7476). ISSUES CLOSED: #7476	2026-04-15 06:37:18 +00:00
HAL9000	74ce88caeb	docs(contributors): add HAL 9000 to contributors list ... ISSUES CLOSED: #7476	2026-04-15 06:37:18 +00:00
HAL9000	cef70ff98a	fix(security): add Robot integration test and CONTRIBUTORS for #7476 ... Add Robot Framework integration test verifying that load_from_entry_points does not call ep.load() for entry points with disallowed module prefixes (security regression test for issue #7476). Also add HAL 9000 to CONTRIBUTORS.md per CONTRIBUTING.md process rules. ISSUES CLOSED: #7476	2026-04-15 06:37:18 +00:00
HAL9000	717a05f604	fix(security): fix plugins/loader.py load_from_entry_point security #7476 ... Parse entry point targets before import so allowlist enforcement happens prior to execution and add a Behave regression scenario covering the disallowed-prefix path. ISSUES CLOSED: #7476	2026-04-15 06:37:18 +00:00