fix(handlers): CWE-78 hardening for DeleteFile and SharedContext - #2014

Merged

HongmingWang-Rabbit merged 3 commits into

fix/cwe78-templates-deleteFile-sharedContext

Apr 24, 2026

Commits on Apr 24, 2026

fix(handlers): CWE-78 hardening for DeleteFile and SharedContext (#2011)

Molecule AI Core Platform Lead
and
claude
committed
7d837de
fix(handlers): CWE-78 — reject absolute paths before strip in DeleteFile; drop null_byte test

Molecule AI App-QA
and
claude
committed
c5da3f1
fix(test): TestDeleteFile_WorkspaceNotFound uses relative path "old-file.txt"

Molecule AI App-QA
and
claude
committed
0cfba19