Home

mweinbach / agent-coworker

publicmweinbach/agent-coworker
Overview Code History Branches Pull requestsIssuesInsights
main
HomeOverview Code PRsIssues

Fix Windows cross-drive path containment

8 months ago

1d9ecda
Authored
mweinbach2/22/2026, 10:20:44 PM
Reject absolute results from path.relative() in isPathInside so paths on other Windows drives/roots are treated as outside allowed scope. This restores command approval scope checks and read/write permission guards for outside-root absolute paths.

Co-authored-by: Codex <noreply@openai.com>

Parentb9e7a8e

1 file changed
  • src/utils/paths.ts+5−0