Reject out-of-root candidates lexically before canonicalize() in resolve_component_path - #197

Merged

mikebronner merged 3 commits into

mainfrom

fix/145-lexical-reject-before-canonicalize

Jun 17, 2026

Commits on Jun 16, 2026

chore: start work on #145
mikebronner
committed
1ef81aa
fix(path_containment): 🔒️ reject out-of-root candidates lexically before canonicalize
mikebronner
committed
0eadceb

Commits on Jun 17, 2026

test(path_containment): ✅ cover symlinked-root tolerance and lexical symlink-escape

mikebronner
and
claude
committed
02e7a99