4 Commits

Include renames

Author	SHA1	Message	Date
admin	cccb9aee84	fix(R-1187 b): restored links point only downward — no absolute target, no '..', no link on the way ... Third automated security review finding, red-proved.	2026-10-26 20:33:26 +01:00
admin	f24233c829	fix(R-1187 b): refuse a link whose parent path passes through a link; born keys listed; psql --set ... Second automated security review finding, red-proved. The go-parity and docker -v gates that refused the push are green.	2026-10-26 20:30:34 +01:00
admin	106325de43	fix(R-1187 b): the import writes only through os.Root — never through a link that leaves the app's folder ... Found by the automated security review of dfd0f8e. Red-proved. Commit only.	2026-10-26 20:28:04 +01:00
admin	dfd0f8ec53	fix(R-1187 a,b,d,f,g): .fab — links carried and restored safely, FIFOs refused, owners kept, busy and bad-path refusals, postgis + ON_ERROR_STOP ... Red-proved (6 tests). Commit only.	2026-10-26 20:26:02 +01:00