Sandboxes - Sandbox SDK 0.12.14 updates trusted certificates after the eMudhra compromise

The private keys of eight eMudhra intermediate certificate authorities ↗︎ can be recovered, so anyone can forge a certificate for any hostname that chains to them. Sandbox SDK images before 0.12.14 trust these certificates. An HTTPS connection that leaves the container directly, such as one from mountBucket() , backups, gitCheckout() , tunnels, or code that runs in the sandbox, can be intercepted with a forged certificate.