8 months ago
1d9ecdaReject absolute results from path.relative() in isPathInside so paths on other Windows drives/roots are treated as outside allowed scope. This restores command approval scope checks and read/write permission guards for outside-root absolute paths. Co-authored-by: Codex <noreply@openai.com>
Parentb9e7a8e