mirror of
https://github.com/stablyai/orca.git
synced 2026-10-20 08:03:28 +00:00
The two `..` tests both passed with the guard deleted: child repos are already filtered to those inside the folder root, so any path a match could accept is inside the folder anyway. Replace the tautological test with one that pins the real behavior (a `..` path normalizing back inside still routes) and label the guard as defense-in-depth against the candidate filter widening. Co-authored-by: Orca <help@stably.ai>