 admin
|
cccb9aee84
|
fix(R-1187 b): restored links point only downward — no absolute target, no '..', no link on the way
gates / gates (push) Successful in 54s
Third automated security review finding, red-proved.
|
2026-10-26 20:33:26 +01:00 |
|
|
admin
|
f24233c829
|
fix(R-1187 b): refuse a link whose parent path passes through a link; born keys listed; psql --set
gates / gates (push) Successful in 1m7s
Second automated security review finding, red-proved. The go-parity and docker -v gates that refused the push are green.
|
2026-10-26 20:30:34 +01:00 |
|
|
admin
|
106325de43
|
fix(R-1187 b): the import writes only through os.Root — never through a link that leaves the app's folder
Found by the automated security review of dfd0f8e. Red-proved. Commit only.
|
2026-10-26 20:28:04 +01:00 |
|
|
admin
|
dfd0f8ec53
|
fix(R-1187 a,b,d,f,g): .fab — links carried and restored safely, FIFOs refused, owners kept, busy and bad-path refusals, postgis + ON_ERROR_STOP
Red-proved (6 tests). Commit only.
|
2026-10-26 20:26:02 +01:00 |
|