2 Commits

Author	SHA1	Message	Date
copilot-swe-agent[bot]	a3d0af2efc	fix(security): address code review feedback on validation logic ... - Improve comment documentation for defense-in-depth validation - Fix test assertion to properly validate basename sanitization - Note regex pattern duplication for future refactoring Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>	2026-02-10 10:28:39 +00:00
copilot-swe-agent[bot]	489aa67a13	fix(security): remediate path traversal vulnerabilities in file operations ... - Fix critical vulnerability: sanitize GPT metadata filename before use - Fix insecure string-based path validation with pathlib methods - Add validation for GPT-extracted filenames - Add comprehensive security test suite (24 tests) - Document all findings in SECURITY_AUDIT.md Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>	2026-02-10 10:26:42 +00:00