vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-04-30 15:50:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): block workspace hardlink alias escapes

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-26 03:42:22 +01:00
parent 53fcfdf794
commit 04d91d0319
8 changed files with 176 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/agents/apply-patch.ts
View File

@@ -266,6 +266,7 @@ async function resolvePatchPath(
cwd: options.cwd,
root: options.cwd,
allowFinalSymlink: purpose === "unlink",
allowFinalHardlink: purpose === "unlink",
});
}
return {
@@ -282,6 +283,7 @@ async function resolvePatchPath(
cwd: options.cwd,
root: options.cwd,
allowFinalSymlink: purpose === "unlink",
allowFinalHardlink: purpose === "unlink",
})
).resolved
: resolvePathFromCwd(filePath, options.cwd);