fix(fs): block allowed-root symlink escapes - #264

Open

Waishnav wants to merge 3 commits into

mainfrom

fix/allowed-roots-symlink-containment

Commits on Aug 31, 2026

fix(fs): resolve allowed paths canonically
Waishnav
committed
11541b8
fix(tools): block symlink escapes in file tools
Waishnav
committed
8bcec18
fix(workspaces): reject symlink root escapes
Waishnav
committed
5b419d4