fix(security): use relpath containment instead of startswith to prevent prefix-collision bypass #11234

Merged

HAL9000 merged 2 commits from security/relpath-containment-fallback into master

2026-06-18 22:42:36 +00:00

Author	SHA1	Message	Date
controller-ci-rerun	d34919d5a3	chore: re-trigger CI [controller] CI / load-versions (pull_request) Successful in 17s Details CI / push-validation (pull_request) Successful in 20s Details CI / build (pull_request) Successful in 41s Details CI / helm (pull_request) Successful in 46s Details CI / quality (pull_request) Successful in 54s Details CI / security (pull_request) Successful in 1m30s Details CI / unit_tests (pull_request) Successful in 6m14s Details CI / lint (pull_request) Successful in 7m1s Details CI / typecheck (pull_request) Successful in 7m20s Details CI / docker (pull_request) Successful in 1m41s Details CI / integration_tests (pull_request) Successful in 8m30s Details CI / coverage (pull_request) Successful in 11m26s Details CI / status-check (pull_request) Successful in 0s Details	2026-06-18 18:22:57 -04:00
CleverAgents Bot	8b7a26e0d7	fix(security): use relpath containment instead of startswith to prevent prefix-collision bypass	2026-06-18 18:22:57 -04:00