fix(core): authorize relative external paths (#37689)

This commit is contained in:
Kit Langton 2026-07-18 19:55:18 -04:00 committed by GitHub
commit c310ef82f4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 52 additions and 17 deletions

View file

@ -385,8 +385,8 @@ Affected schema:
Change:
- Resolve relative mutation paths within the active Location.
- Accept absolute internal paths and require explicit `external_directory` approval before leaf approval for external absolute paths.
- Resolve relative mutation paths from the active Location.
- Require explicit `external_directory` approval before leaf approval for external paths.
- Keep named references read-oriented and reject them for mutation.
- Revalidate path authority immediately before write mechanics.