fix(webview-message-handler): enforce workspace containment for markdown-sourced openFile requests - #1762

Merged

edelauna merged 9 commits into

Zoo-Code-Org:mainfrom

easonLiangWorldedtech:fix/openfile-workspace-containment

Sep 26, 2026

Commits on Sep 23, 2026

fix(webview-message-handler): enforce workspace containment for markdown-sourced openFile requests
easonliang28
committed
c607864

Commits on Sep 24, 2026

fix(webview-message-handler): harden markdown containment against encoded and symlinked paths
easonliang28
committed
e98713a
test(extension): pin the new containment mutants and fail-closed branches
easonliang28
committed
0d393fd
test(extension): cover the hostile-bound reject branch and the root guard
easonliang28
committed
ceff8bf
fix(extension): type the realpath spy parameter as PathLike
easonliang28
committed
3570b70
test(extension): assert the exact rejection message for the hostile-bound case
easonliang28
committed
d4d63d4
chore: re-trigger CodeRabbit review
easonliang28
committed
1c076f0
fix(extension): fail closed on dangling symlinks in realpath containment
easonliang28
committed
7f3668d
chore(extension): document the equivalent lstat-symlink mutant
easonliang28
committed
e182070