Skip to content

v1.4.525

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Oct 18:39
· 33 commits to main since this release
v1.4.525
bcb7734

Changes

PR #2272 by ksylvan: fix: refuse writes into .git through its Windows 8.3 short name

  • Fixed a security gap that allowed writes into the .git directory through its Windows 8.3 short name (GIT~1), which could let create_coding_feature plant a Git hook.
  • Updated unsafePath to reject any path component that resolves to the same file as the .git entry in its parent directory, using os.SameFile.
  • Added a Windows test covering the git~1 alias.
  • Added a windows-latest job to the CI workflow.
  • Limited the Windows CI job to the file manager domain tests (run with -v), since other packages fail on Windows due to path separators, shell scripts, and a notification timeout.
Assets 11
Loading