Files
claudecodeui/server/shared
Verify User 17b8a9a561 fix(security): canonicalize Claude image attachment reads
Resolve image attachment paths with realpath before reading so symlinks inside allowed roots cannot escape to arbitrary files. Preserve support for symlinked project/upload roots and skip invalid descriptors instead of failing the provider turn.
2026-07-06 23:24:17 +03:00
..
2026-06-29 09:37:21 +00:00