Harden command registration path handling#3088

Merged

mnriem merged 15 commits into

github:mainfrom

mnriem:mnriem-fix-command-path-traversal

Jun 22, 2026

Commits on Jun 22, 2026

fix: validate command 'file' field against path traversal in registrar

mnriem
and
Copilot
committed
test/fix: address review — robust absolute-path test and tolerant reads

mnriem
and
Copilot
committed
test: rename traversal fixtures to avoid CodeQL secret-storage false positive

mnriem
and
Copilot
committed
fix: reject Windows drive-relative 'file' values in traversal guards

mnriem
and
Copilot
committed
fix: use anchor under both path flavors so POSIX-absolute is rejected on Windows

mnriem
and
Copilot
committed
fix: validate command 'file' field against path traversal in registrar

mnriem
and
Copilot
committed
test/fix: address review — robust absolute-path test and tolerant reads

mnriem
and
Copilot
committed
test: rename traversal fixtures to avoid CodeQL secret-storage false positive

mnriem
and
Copilot
committed
fix: reject Windows drive-relative 'file' values in traversal guards

mnriem
and
Copilot
committed
fix: use anchor under both path flavors so POSIX-absolute is rejected on Windows

mnriem
and
Copilot
committed
Merge commit '8041cddb3a2039dd4d81229e0888e51d6813487c' into mnriem-fix-command-path-traversal
mnriem
committed
refactor: harden register_commands inputs and tighten manifest 'file' validation

mnriem
and
Copilot
committed
refactor: align runtime '..' policy, correct comment, dedupe test helper

mnriem
and
Copilot
committed
Extract shared path-safety policy and warn on unreadable command files

mnriem
and
Copilot
committed
Retrigger CI

mnriem
and
Copilot
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Harden command registration path handling#3088

Harden command registration path handling#3088
mnriem merged 15 commits into
github:mainfrom
mnriem:mnriem-fix-command-path-traversal

Commits on Jun 22, 2026

fix: validate command 'file' field against path traversal in registrar

test/fix: address review — robust absolute-path test and tolerant reads

test: rename traversal fixtures to avoid CodeQL secret-storage false positive

fix: reject Windows drive-relative 'file' values in traversal guards

fix: use anchor under both path flavors so POSIX-absolute is rejected on Windows

fix: validate command 'file' field against path traversal in registrar

test/fix: address review — robust absolute-path test and tolerant reads

test: rename traversal fixtures to avoid CodeQL secret-storage false positive

fix: reject Windows drive-relative 'file' values in traversal guards

fix: use anchor under both path flavors so POSIX-absolute is rejected on Windows

Merge commit '8041cddb3a2039dd4d81229e0888e51d6813487c' into mnriem-fix-command-path-traversal

refactor: harden register_commands inputs and tighten manifest 'file' validation

refactor: align runtime '..' policy, correct comment, dedupe test helper

Extract shared path-safety policy and warn on unreadable command files

Retrigger CI