3 Commits

Author	SHA1	Message	Date
Haileyesus	baf45b7282	fix(security): canonicalize Claude image attachment reads ... Resolve image attachment paths with realpath before reading so symlinks inside allowed roots cannot escape to arbitrary files. Preserve support for symlinked project/upload roots and add focused coverage for both cases.	2026-07-06 23:03:52 +03:00
Haileyesus	417fe11718	fix: address code scanning findings ... - enforce a second image trust boundary in the provider builders: buildClaudeUserContent/buildCodexInputItems only accept files inside the upload store or the run's working directory (CodeQL path injection) - drop an always-true selectedProject check in handleSubmit - remove the unused resume option from spawnCursor	2026-07-06 21:22:30 +03:00
Haileyesus	a253a2bda4	feat: support attached images for all providers	2026-07-06 13:32:06 +03:00