fix(snapshot): allow /sandbox/.openclaw-data symlinks in safeTarExtract - #2488

Merged

ericksoa merged 3 commits into

NVIDIA:mainfrom

BenediktSchackenberg:fix/safeTarExtract-symlink-audit-2317

Apr 28, 2026

Commits on Apr 26, 2026

fix(snapshot): allow /sandbox/.openclaw-data symlinks in safeTarExtract
BenediktSchackenberg
committed
21c0c17
fix(snapshot): normalize symlink target before prefix check to block traversal bypass
BenediktSchackenberg
committed
9f614c5

Commits on Apr 28, 2026

Merge branch 'main' into fix/safeTarExtract-symlink-audit-2317
ericksoa
authored
26391f3