From 2b828bd138e36718cab8008f149250334b1ba2b2 Mon Sep 17 00:00:00 2001
From: Ramnique Singh <30795890+ramnique@users.noreply.github.com>
Date: Wed, 21 Jan 2026 23:24:42 +0530
Subject: [PATCH] remove curl from default allow-list

---
 apps/x/packages/core/src/config/security.ts | 1 -
 1 file changed, 1 deletion(-)

diff --git a/apps/x/packages/core/src/config/security.ts b/apps/x/packages/core/src/config/security.ts
index c2b4f9fb..9419e76e 100644
--- a/apps/x/packages/core/src/config/security.ts
+++ b/apps/x/packages/core/src/config/security.ts
@@ -6,7 +6,6 @@ export const SECURITY_CONFIG_PATH = path.join(WorkDir, "config", "security.json"
 
 const DEFAULT_ALLOW_LIST = [
     "cat",
-    "curl",
     "date",
     "echo",
     "grep",