mirror of https://github.com/garrytan/gstack.git
70e8056c8f
screenshot, pdf, and responsive accepted arbitrary output paths, allowing writes to any location on disk. eval read arbitrary files without restriction. Add path validation: - Output paths (screenshot/pdf/responsive): restricted to /tmp or cwd - Input paths (eval): restricted to cwd only - Rejects traversal via .. after path resolution Closes #13 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| fixtures | ||
| commands.test.ts | ||
| path-validation.test.ts | ||
| snapshot.test.ts | ||
| test-server.ts | ||