diff --git a/launcher/src/main.rs b/launcher/src/main.rs index 7771b9b9..27f08f92 100644 --- a/launcher/src/main.rs +++ b/launcher/src/main.rs @@ -433,6 +433,7 @@ fn is_allowed_guest_env_key(key: &str, egress_gateway_enabled: bool) -> bool { "SANDBOX_LOG_LEVEL", "SANDBOX_MAX_CONCURRENT_JOBS", "SANDBOX_MAX_FILE_SIZE", + "SANDBOX_MAX_INPUT_FILES", "SANDBOX_MAX_NESTING_DEPTH", "SANDBOX_MAX_OPEN_FILES", "SANDBOX_MAX_OUTPUT_FILES", @@ -850,6 +851,13 @@ mod tests { } } + #[test] + fn guest_env_allowlist_forwards_input_file_limit_in_both_egress_modes() { + for egress_gateway_enabled in [false, true] { + assert!(is_allowed_guest_env_key("SANDBOX_MAX_INPUT_FILES", egress_gateway_enabled)); + } + } + #[test] fn guest_env_allowlist_preserves_legacy_file_server_url_only_without_egress_gateway() { assert!(is_allowed_guest_env_key("FILE_SERVER_URL", false));