hugocasa b5bd8245d8 fix: reject symlink traversal in job-dir path validation (#9713) ...

* fix: reject symlink traversal in job-dir path validation

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* test: cover dangling symlink in job-dir path validation

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix: close symlink-traversal bypass via in-bounds `..` in path check

Walk the normalized relative path instead of raw user components, so an
in-bounds `..` (e.g. `foo/../evil/payload`) can no longer drift the walk
past a planted symlink. Adds regression coverage.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-24 14:08:45 +00:00

..

examples

fix: enrich OTEL log records with per-request LogContext (#8812)

2026-04-13 21:50:50 +00:00

src

fix: reject symlink traversal in job-dir path validation (#9713)

2026-06-24 14:08:45 +00:00

tests

perf(backend): gate asset producer-change event on write-set changes (#9672)

2026-06-19 13:49:32 +00:00

Cargo.toml

feat: Db-backed user drafts (#9351)

2026-06-15 10:23:16 +02:00