fix(lib): fail-closed upload containment — default UPLOAD_BASE_DIR to CWD - #367

Open

SavioBS629 wants to merge 3 commits into

browserstack:mainfrom

SavioBS629:fix/fail-closed-upload-basedir

Commits on Aug 10, 2026

fix(lib): fail-closed upload containment — default UPLOAD_BASE_DIR to CWD

SavioBS629
and
claude
committed
5010c65
fix(lib): address review findings — root-cwd guard, single default owner, docs

SavioBS629
and
claude
committed
b80824b
Update tests/tools/upload-validator.test.ts
SavioBS629
authored
6df2c1e