Fix path traversal across node managers - #7

Open

huangzesen wants to merge 1 commit into

mainfrom

fix/3-path-traversal

huangzesen commented Aug 15, 2026

Contributor

Fixes #3

Summary

add a shared safe_child helper that confines user-supplied path segments beneath the intended parent directory
apply confinement to email local delivery, system targets, avatar lifecycle paths, and contract validation paths
add regression tests for traversal and absolute-path rejection

Tests

PYTHONPATH=src pytest -q


          Fix path traversal in managers

5ffbacf

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet