Repository navigation

fix(security): path containment checks for Windows environments - #3298

Open

Gracy769 wants to merge 17 commits into

ultraworkers:mainfrom

Gracy769:main

Commits on Aug 24, 2026
- fix(security): path containment checks for Windows environments
  Gracy769
  committed
  5c23e5d
Commits on Aug 26, 2026
- test: add UNC path test for path extraction and fix windows tests
  Gracy769
  committed
  3093baf
Commits on Aug 28, 2026
- test: add regression test for symlink escape using absolute windows path
  Gracy769
  committed
  1339a07
Commits on Aug 29, 2026
- test: support unprivileged Windows runners with NTFS junction fallback and add mocked escape test
  Gracy769
  committed
  59f1809
Commits on Aug 30, 2026
- docs(test): document junction UNC limitation and add mocked UNC link escape test
  Gracy769
  committed
  a36cfd0
- style: remove trailing whitespace in path_scope.py
  Gracy769
  committed
  e26897e
- test: fix windows test compatibility
  Gracy769
  committed
  4bde1ee
Commits on Aug 31, 2026
- fix(security): deny unresolvable paths and enable Git bash detection on Windows
  Gracy769
  committed
  31a037f
Commits on Sep 1, 2026
- perf(test): cache bash probe resolution per session with functools.lru_cache
  Gracy769
  committed
  c1f2471
Commits on Sep 3, 2026
- test: extract bash detection to shared _bash helper
  Gracy769
  committed
  cabcdc0
Commits on Sep 4, 2026
- test: enforce bash lru_cache clearance and expose specific skip reasons
  Gracy769
  committed
  1b6a32b
Commits on Sep 5, 2026
- test: ensure full candidate probing and clear cache in setUp
  Gracy769
  committed
  37e1673
- test: add regression coverage for drive-relative and escaped UNC paths
  Gracy769
  committed
  25ed82a
Commits on Sep 6, 2026
- test: add end-to-end UNC containment test
  Gracy769
  committed
  d8b7169
Commits on Sep 7, 2026
- test: add explicit coverage for unquoted UNC paths
  Gracy769
  committed
  87a64b5
Commits on Sep 18, 2026
- trigger ci
  Gracy769
  committed
  e113164
Commits on Oct 12, 2026
- Merge branch 'upstream/main' into main
  Gracy769
  committed
  354e1b0

Navigation Menu

Repository navigation

fix(security): path containment checks for Windows environments - #3298

fix(security): path containment checks for Windows environments#3298
Gracy769 wants to merge 17 commits into
ultraworkers:mainfrom
Gracy769:main

Commits on Aug 24, 2026

fix(security): path containment checks for Windows environments

Commits on Aug 26, 2026

test: add UNC path test for path extraction and fix windows tests

Commits on Aug 28, 2026

test: add regression test for symlink escape using absolute windows path

Commits on Aug 29, 2026

test: support unprivileged Windows runners with NTFS junction fallback and add mocked escape test

Commits on Aug 30, 2026

docs(test): document junction UNC limitation and add mocked UNC link escape test

style: remove trailing whitespace in path_scope.py

test: fix windows test compatibility

Commits on Aug 31, 2026

fix(security): deny unresolvable paths and enable Git bash detection on Windows

Commits on Sep 1, 2026

perf(test): cache bash probe resolution per session with functools.lru_cache

Commits on Sep 3, 2026

test: extract bash detection to shared _bash helper

Commits on Sep 4, 2026

test: enforce bash lru_cache clearance and expose specific skip reasons

Commits on Sep 5, 2026

test: ensure full candidate probing and clear cache in setUp

test: add regression coverage for drive-relative and escaped UNC paths

Commits on Sep 6, 2026

test: add end-to-end UNC containment test

Commits on Sep 7, 2026

test: add explicit coverage for unquoted UNC paths

Commits on Sep 18, 2026

trigger ci

Commits on Oct 12, 2026

Merge branch 'upstream/main' into main