okf-memory/okf-agent-memory
0
Fork 0
mirror of https://github.com/okf-memory/okf-agent-memory.git synced 2026-10-01 18:25:09 +00:00
Code Issues Releases Packages Activity
okf-agent-memory/pkg/okf/path.go
google-labs-jules[bot] f9265e05bb fix(security): prevent absolute path traversal evasion cross-platform 
* Introduced IsAbsPath helper to securely detect cross-platform absolute paths
* Patched resolveInBundle to explicitly reject absolute paths early before
  they can be evaluated by path.Clean and Join as relative on POSIX systems
* Patched validate method and others to also use IsAbsPath
* Verified with rigorous testing of absolute paths evasion in mutation flow

Co-authored-by: sknr <11868275+sknr@users.noreply.github.com>
2026-09-23 04:29:37 +00:00

22 lines
586 B
Raw Permalink Blame History