memory-os/docker
@aaronjmars e654b9f5ee
fix(security): use Path.is_relative_to for WIKI_PATH containment in ingest_file
Replaces str.startswith() with Path.is_relative_to() to prevent sibling-prefix paths (e.g. /wiki-shared/x.md when WIKI_PATH=/wiki) from bypassing the entry guard. Includes regression test with 3 scenarios proving the bug exists pre-patch and is fixed post-patch.

Closes #26
 
Co-authored-by: aaronjmars <61592645+aaronjmars@users.noreply.github.com>
2026-06-10 07:20:07 -03:00
..
worker fix(security): use Path.is_relative_to for WIKI_PATH containment in ingest_file 2026-06-10 07:20:07 -03:00
docker-compose.yml fix: resolve 6 installation bugs in setup.sh and docker-compose (#28) 2026-06-08 21:53:15 -03:00