Skip to content

fix(security): keep symlink escape checks for unknown walk entries#62

Merged
phantom5099 merged 1 commit into
mainfrom
fork-pr-430-1776951612
Apr 23, 2026
Merged

fix(security): keep symlink escape checks for unknown walk entries#62
phantom5099 merged 1 commit into
mainfrom
fork-pr-430-1776951612

Conversation

@fennoai
Copy link
Copy Markdown

@fennoai fennoai Bot commented Apr 23, 2026

Requested by @phantom5099

Summary

  • Fix ResolveWorkspaceWalkPathFromRoot so unknown walk entry types do not bypass symlink-escape checks
  • Keep regular-file fast path only after explicit regular verification for ambiguous Type()==0 entries
  • Verified with focused and full go test runs

Generated with [codeagent](https://github.com/qbox/codeagent)
Co-authored-by: phantom5099 <245659304+phantom5099@users.noreply.github.com>
@phantom5099 phantom5099 merged commit 785403d into main Apr 23, 2026
1 check passed
@fennoai fennoai Bot deleted the fork-pr-430-1776951612 branch April 23, 2026 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants