fix(security): fix file_tools.py validate_path startswith bypass #7478 #11014

Closed
HAL9000 wants to merge 2 commits from fix/issue-pr-11002 into master

2 Commits

Author SHA1 Message Date
CleverAgents Bot 67a61472e0 ci: stop master workflow on PR updates
CI / lint (pull_request) Has been cancelled
CI / typecheck (pull_request) Has been cancelled
CI / security (pull_request) Has been cancelled
CI / quality (pull_request) Has been cancelled
CI / unit_tests (pull_request) Has been cancelled
CI / integration_tests (pull_request) Has been cancelled
CI / e2e_tests (pull_request) Has been cancelled
CI / coverage (pull_request) Has been cancelled
CI / build (pull_request) Has been cancelled
CI / docker (pull_request) Has been cancelled
CI / helm (pull_request) Has been cancelled
CI / push-validation (pull_request) Has been cancelled
CI / status-check (pull_request) Has been cancelled
Remove the stale pull_request trigger from master.yml so PR branch commits do not launch the master workflow.

Maintenance patch for PR #11014.
2026-06-10 20:20:34 -04:00
HAL9000 876a7b57b8 fix(security): fix file_tools.py validate_path startswith bypass #7478
CI / benchmark-publish (pull_request) Has been skipped
CI / build (pull_request) Successful in 49s
CI / lint (pull_request) Successful in 1m7s
CI / helm (pull_request) Successful in 46s
CI / quality (pull_request) Successful in 1m12s
CI / benchmark-regression (pull_request) Failing after 1m17s
CI / typecheck (pull_request) Successful in 1m40s
CI / push-validation (pull_request) Successful in 45s
CI / security (pull_request) Successful in 1m58s
CI / integration_tests (pull_request) Successful in 4m18s
CI / e2e_tests (pull_request) Failing after 4m15s
CI / unit_tests (pull_request) Successful in 6m2s
CI / docker (pull_request) Successful in 1m28s
CI / coverage (pull_request) Successful in 10m44s
CI / status-check (pull_request) Failing after 3s
- Add CHANGELOG.md Security section entry for validate_path path traversal fix.
- Update CONTRIBUTORS.md with HAL 9000 contribution description.
- Fix BDD test scenario tag from @tdd_issue_7558 to @tdd_issue_7478.

ISSUES CLOSED: #7478
2026-05-08 02:44:18 +00:00