xiaolai 0bf754673a fix: constrain cross-reference resolution to repo root (#91) ...

`(file_path.parent / link_path).resolve()` could silently follow a
crafted `../../outside/path` link that escapes the repository root.
Paths that resolve outside the repo root are now skipped rather than
checked for existence.

Co-authored-by: Claude Code <noreply@anthropic.com>

2026-04-25 00:28:03 +02:00

3.9 KiB

Raw Blame History

View Raw