@aaronjmars e654b9f5ee fix(security): use Path.is_relative_to for WIKI_PATH containment in ingest_file ...

Replaces str.startswith() with Path.is_relative_to() to prevent sibling-prefix paths (e.g. /wiki-shared/x.md when WIKI_PATH=/wiki) from bypassing the entry guard. Includes regression test with 3 scenarios proving the bug exists pre-patch and is fixed post-patch.

Closes #26
 
Co-authored-by: aaronjmars <61592645+aaronjmars@users.noreply.github.com>

2026-06-10 07:20:07 -03:00

..

services

fix: resolve 5 easy Phase 4 performance/resilience issues

2026-06-03 11:53:18 -03:00

tasks

fix(security): use Path.is_relative_to for WIKI_PATH containment in ingest_file

2026-06-10 07:20:07 -03:00

Dockerfile

fix: align worker UID with host user (1000) for bind mount read access

2026-06-07 13:06:11 -03:00

main.py

fix: resolve 4 code-critical issues from Fase 2 audit

2026-06-03 10:54:53 -03:00

requirements.txt

Initial commit: Memory OS — 6-layer memory architecture for Hermes Agent

2026-05-31 16:50:37 -03:00