This PR fixes a potential path traversal vulnerability by ensuring all paths are properly normalized in the `resolvePathAgainstWorkdir` function. ## Changes - Added path normalization for both absolute and relative paths - Ensures normalized paths are used in all subsequent operations - Prevents potential path traversal attacks through non-normalized paths This minimal change addresses the security concern without adding unnecessary complexity, while maintaining compatibility with existing code. |
||
|---|---|---|
| .. | ||
| bin | ||
| examples | ||
| scripts | ||
| src | ||
| tests | ||
| .dockerignore | ||
| .editorconfig | ||
| .eslintrc.cjs | ||
| .gitignore | ||
| build.mjs | ||
| Dockerfile | ||
| HUSKY.md | ||
| ignore-react-devtools-plugin.js | ||
| package.json | ||
| require-shim.js | ||
| tsconfig.json | ||
| vite.config.ts | ||