Appearance
Cursor
Validate Cursor's network egress (including extensions), integrated terminal behaviors, file associations, and data-motion surfaces under the Secure Sandbox.
Objectives
- Enforce deny-by-default egress, proxy enforcement, and pinned roots for marketplace/extensions.
- Verify integrated terminal commands (curl/wget/git/PowerShell) cannot bypass egress controls.
- Confirm file associations, clipboard/drag-drop behave as intended.
Preconditions
- Windows target with Turbo Launcher and Secure Sandbox.
- Cursor installed.
- Networking deny-by-default with proxy enforcement and pinned roots.
- DataMotion posture configured for clipboard/dragDrop/screen capture.
Controls Under Test
runtime.networking.egressDefaultAction, proxy enforcement and pinned roots.runtime.dataMotion.rules[]withchannel: "clipboard"|"dragDrop"|"screenCapture".- File associations for file types Cursor handles.
Test Scenarios
| ID | Canonical ID | Scenario | Procedure | Expected Outcome |
|---|---|---|---|---|
| SCEN-APP-CURSOR-01 | NET-ENCRYPT-01 | Marketplace via proxy | Install a popular extension from Marketplace. | Requests traverse enforced proxy; pinning enforced; denied if not allowed. |
| SCEN-APP-CURSOR-02 | NET-EGRESS-01 | Direct IP from terminal | curl http://<IP> | Denied per egress default deny. |
| SCEN-APP-CURSOR-03 | NET-PROTO-02 | IPv6 parity | curl -6 https://example.com | Blocked same as IPv4 if not allowlisted. |
| SCEN-APP-CURSOR-04 | DM-CLIP-01 | Clipboard outbound | Copy from editor; paste on host. | Denied/processed per policy. |
| SCEN-APP-CURSOR-05 | DM-DRAG-01 | Drag-drop outbound | Drag a file from Cursor to host. | Blocked per policy. |
| SCEN-APP-CURSOR-06 | HARD-FILES-01 | Files tab boundaries | Open, edit, save within Storage Context; check host. | Writes remain overlay-only unless mapped. |
| SCEN-APP-CURSOR-07 | HARD-PROCESS-04 | Malicious extension process | Install 'Hello World' extension; modify to spawn node.exe accessing env/net. | Child process inherits sandbox; access denied. |
| SCEN-APP-CURSOR-08 | DM-CLIP-04 | CertUtil decode bypass | Paste large base64 blob (> limit) to terminal; run certutil -decode. | Pass: Paste blocked by DataMotion size limit; payload never reaches terminal. Audit shows channel: "clipboard", action: "deny". |
| SCEN-APP-CURSOR-09 | NET-EGRESS-01 | Third-party gallery | Configure serviceUrl to non-official gallery (e.g., OpenVSX) in settings. | Connection denied by default egress unless allowlisted; audit shows action: deny; proxy/pinning enforced. |
Evidence Requirements
networkanddataMotionevents as applicable; includerule.id,priority, and protocol fields.
Troubleshooting
- Some extensions may batch requests; monitor audit over a longer window.
- Integrated terminal may respect system proxy variables; ensure policy enforces proxy at the sandbox boundary.
Known Limitations & Negative Space
- Extensions can vary widely; validate a representative set for the organization