Li-john1021 90c5d526e2

fix(paths): reject Windows reserved names on host-visible paths (#6102) ...

* fix(paths): reject Windows reserved names on host-visible paths

Uploads, skill support files, and sandbox path checks now share one helper that rejects CON, PRN, AUX, NUL, COM1-COM9, and LPT1-LPT9 (including names like con.txt) and components that end in a dot or space. The check is not limited to Windows so a Linux host cannot store a name that breaks when the same tree is used on Windows.

* fix(paths): validate quoted local bash paths as whole words

The absolute-path scan stopped at whitespace, so a quoted upload name such as report. final.txt or CON notes.txt was rejected as a truncated segment. Local bash checks now use the shlex argument for traversal and Windows-incompatible segments.

* fix(paths): do not block reads of existing host names

* style(paths): format with ruff 0.15.12

2026-10-01 09:11:19 +08:00

..

extension-api

feat(extensions): grant bounded host model invocation (#5796)

2026-09-25 15:24:09 +08:00

harness

fix(paths): reject Windows reserved names on host-visible paths (#6102)

2026-10-01 09:11:19 +08:00