Files
claudecodeui/server/shared/tests
Haileyesus baf45b7282 fix(security): canonicalize Claude image attachment reads
Resolve image attachment paths with realpath before reading so symlinks
inside allowed roots cannot escape to arbitrary files. Preserve support for
symlinked project/upload roots and add focused coverage for both cases.
2026-07-06 23:03:52 +03:00
..