Skip to content

fix(security): reject backslash traversal in workspace path resolution#59

Merged
phantom5099 merged 1 commit into
mainfrom
fork-pr-430-1776951612
Apr 23, 2026
Merged

fix(security): reject backslash traversal in workspace path resolution#59
phantom5099 merged 1 commit into
mainfrom
fork-pr-430-1776951612

Conversation

@fennoai
Copy link
Copy Markdown

@fennoai fennoai Bot commented Apr 23, 2026

Requested by @phantom5099

Summary

  • Normalize to path separators before workspace target resolution
  • Make traversal rejected consistently across platforms
  • Unblock failing tests in and

…olution

Generated with [codeagent](https://github.com/qbox/codeagent)
Co-authored-by: phantom5099 <245659304+phantom5099@users.noreply.github.com>
@phantom5099 phantom5099 merged commit 0c335a9 into main Apr 23, 2026
1 check passed
@fennoai fennoai Bot deleted the fork-pr-430-1776951612 branch April 23, 2026 13:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants