fix: harden workspace boundary path resolution

This commit is contained in:
Peter Steinberger
2026-02-26 13:19:55 +01:00
parent ecb2053fdd
commit 46eba86b45
8 changed files with 767 additions and 177 deletions

View File

@@ -71,7 +71,7 @@ export async function assertSandboxPath(params: {
};
await assertNoPathAliasEscape({
absolutePath: resolved.resolved,
rootPath: path.resolve(params.root),
rootPath: params.root,
boundaryLabel: "sandbox root",
policy,
});