Clover

jarianc/Clover

Fork 0

Commit Graph

Author	SHA1	Message	Date
opencode	7680fea98e	fix: prevent path traversal in file operations (issue #2 , #4 ) - Add _validate_path() using os.path.realpath() to resolve symlinks - Enforce working directory chroot (CLOVER_PROJECT_ROOT env var) - All file ops (read, create, update, delete, list) now validated - Block access to files outside project directory	2026-07-05 07:01:13 +00:00
Jarian Cottingham	7e8d31af6e	Clover created	2026-01-13 00:07:41 -06:00

Author

SHA1

Message

Date

opencode

7680fea98e

fix: prevent path traversal in file operations (issue #2 , #4 )

- Add _validate_path() using os.path.realpath() to resolve symlinks
- Enforce working directory chroot (CLOVER_PROJECT_ROOT env var)
- All file ops (read, create, update, delete, list) now validated
- Block access to files outside project directory

2026-07-05 07:01:13 +00:00

Jarian Cottingham

7e8d31af6e

Clover created

2026-01-13 00:07:41 -06:00

2 Commits