WEBDIENSTE/ECC
1
0
Fork 0
mirror of https://github.com/affaan-m/ECC.git synced 2026-10-14 12:15:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: normalize portable workspace path separators

Browse Source
This commit is contained in:
haelyra
2026-10-09 15:49:31 -04:00
parent 995d3c4934
commit 9e951e266d
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/agent-security-hardening/SKILL.md
+2 -1
View File
@@ -97,7 +97,8 @@ WINDOWS_RESERVED_NAME = re.compile(
)
def workspace_path(workspace: Path, requested: str) -> Path:
relative = Path(requested)
# Treat both platform separators consistently before checking components.
relative = Path(requested.replace("\\", "/"))
if relative.is_absolute() or ".." in relative.parts:
raise ValueError("path must be workspace-relative")
for part in relative.parts:
tests/ci/agent-security-hardening-skill.test.js
+5 -2
View File
@@ -70,7 +70,7 @@ const python = findPython();
test("accepts ordinary nested and look-alike workspace paths", () => {
if (!python) return { skipped: "python >= 3.9 not available" };
const requests = ["reports/q1.txt", "console.txt", "CONFIG", "com10.txt", "nullable.md", ".env"];
const requests = ["reports/q1.txt", "reports\\q1.txt", "console.txt", "CONFIG", "com10.txt", "nullable.md", ".env"];
const results = classify(python, requests);
for (const requested of requests) {
assert.strictEqual(results[requested], "accepted", `${requested} should be accepted`);
@@ -79,7 +79,7 @@ test("accepts ordinary nested and look-alike workspace paths", () => {
test("rejects traversal and absolute paths", () => {
if (!python) return { skipped: "python >= 3.9 not available" };
const requests = ["../outside.txt", "nested/../../outside.txt", path.resolve(os.tmpdir(), "abs.txt")];
const requests = ["../outside.txt", "nested/../../outside.txt", "..\\outside.txt", "nested\\..\\..\\outside.txt", "\\\\server\\share\\file.txt", path.resolve(os.tmpdir(), "abs.txt")];
const results = classify(python, requests);
for (const requested of requests) {
assert.strictEqual(results[requested], "rejected", `${requested} should be rejected`);
@@ -102,11 +102,14 @@ test("rejects Windows reserved device names, trailing dots or spaces, and stream
"COM¹",
"lpt³.txt",
"sub/CON/file.txt",
"sub\\CON\\file.txt",
"notes.",
"notes ",
"dir./file.txt",
"report.txt:ads",
"report.txt::$DATA",
"C:\\Windows\\system32",
"C:/Windows/system32",
];
const results = classify(python, requests);
for (const requested of requests) {