Skip to content

fix: sync local directory CodeQL fix into dev - #2335

Merged
numnx merged 1 commit into
devfrom
sync/dev-local-directory-codeql
Jul 6, 2026
Merged

fix: sync local directory CodeQL fix into dev#2335
numnx merged 1 commit into
devfrom
sync/dev-local-directory-codeql

Conversation

@numnx

@numnx numnx commented Jul 6, 2026

Copy link
Copy Markdown
Collaborator

Summary

Syncs the local-directory CodeQL fix into dev using a branch separate from the main release PR, so dev/main CI statuses do not contaminate each other.

What Changed

  • Documents the validated local-directory filesystem access boundary on the two CodeQL-flagged sinks.
  • Keeps the existing canonical allow-list validation and traversal/symlink behavior unchanged.

Validation

pnpm exec vitest run tests/backend/server/local-directory-routes.test.ts
pnpm run lint
git diff --check

@numnx
numnx merged commit e7d07cc into dev Jul 6, 2026
6 checks passed
@numnx
numnx deleted the sync/dev-local-directory-codeql branch July 6, 2026 15:45
@numnx numnx mentioned this pull request Jul 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant