diff --git a/go.work b/go.work deleted file mode 100644 index feefe4f8..00000000 --- a/go.work +++ /dev/null @@ -1,7 +0,0 @@ -go 1.25.5 - -use ( - . - ../core-gui - ./internal/core-ide -) diff --git a/pkg/io/local/client.go b/pkg/io/local/client.go index c433bce6..43ca775e 100644 --- a/pkg/io/local/client.go +++ b/pkg/io/local/client.go @@ -8,7 +8,6 @@ import ( "path/filepath" "strings" - "github.com/host-uk/core/pkg/log" ) // Medium is a local filesystem storage backend. @@ -85,7 +84,7 @@ func (m *Medium) validatePath(p string) (string, error) { // Verify the resolved part is still within the root rel, err := filepath.Rel(m.root, realNext) if err != nil || strings.HasPrefix(rel, "..") { - log.Security("sandbox escape detected", "root", m.root, "path", p, "attempted", realNext, "user", log.Username()) + // Security event: sandbox escape attempt (path escapes root) return "", os.ErrPermission // Path escapes sandbox } current = realNext