gstack/browse
Garry Tan 5645839186
security: path traversal prevention for screenshot/pdf/eval (PR #26)
Add validateOutputPath() for screenshot/pdf/responsive (restricts to
/tmp and cwd) and validateReadPath() for eval (blocks .. sequences and
absolute paths outside safe dirs). 7 new tests.

Credit: Jah-yee (PR #26)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-12 20:28:54 -07:00
..
bin Phase 3: /qa skill — systematic QA testing with health scores 2026-03-12 13:34:06 -07:00
src security: path traversal prevention for screenshot/pdf/eval (PR #26) 2026-03-12 20:28:54 -07:00
test security: redact sensitive values from command output (PR #21) 2026-03-12 20:28:48 -07:00
SKILL.md Phase 2: Rewrite SKILL.md as QA playbook + command reference 2026-03-12 13:33:54 -07:00