Skip to content

fix(mobile): shared file names can no longer write outside the Android cache - #26175

Merged
juliusmarminge merged 1 commit into
mainfrom
t3/fix-android-share-path-traversal
Oct 27, 2026
Merged

juliusmarminge merged 1 commit into
mainfrom
t3/fix-android-share-path-traversal

fix(mobile): shared file names can no longer write outside the Androi…

6b2eb35
Select commit
Loading
Failed to load commit list.
MacroscopeApp / Macroscope - Approvability Check succeeded Oct 27, 2026 in 1m 32s

Approved

  • Eligibility
  • Correctness

Note

More information about how approvability works can be found in our Help Center.

Details

Eligibility
Incoming Android shares now use sanitized filenames in unique cache directories, with a canonical-path containment check. This is a narrowly scoped hardening of temporary-file handling with no evident material risk requiring human judgment.

Notes:
No code owners found in target merge base dc84b09


Agent Credits: 30 credits
Approvability runs at a flat rate of 30 credits whenever the agent is asked for a verdict.