fix(allowedpaths): resolve ".." against the walked path, not lexically, after a symlink - #564

Draft

julesmcrt wants to merge 3 commits into

mainfrom

jules.macret/symlink-dotdot-resolution

Commits on Jul 22, 2026

fix(allowedpaths): resolve ".." against the walked path, not lexically, after a symlink
julesmcrt
committed
36abaf4
fix: preserve Windows volume and normalize forward slashes in path resolver

julesmcrt
and
claude
committed
ffbbd54
fix: reject dotdot traversal through missing or non-directory components

julesmcrt
and
claude
committed
ec2e9ca