Check uv-build Python version in install step

Agent-Logs-Url: https://github.com/version-fox/vfox-python/sessions/5852e539-b06d-4c0c-b5d1-b981726a91d9

Co-authored-by: bytemain <13938334+bytemain@users.noreply.github.com>

Author: Copilot

.github/workflows/vfox-test.yaml

@@ -153,13 +153,17 @@ jobs:
           if ($LASTEXITCODE -ne 0) {
             exit $LASTEXITCODE
           }
-          $python_exe = Join-Path $HOME ".vfox\cache\python\v-3.10.20\python-3.10.20\python.exe"
-          if (-not (Test-Path $python_exe)) {
-            Write-Error "python@3.10.20 uv-build install did not create $python_exe"
-            exit 1
-          }
           vfox use -g python@3.10.20
+          if ($LASTEXITCODE -ne 0) {
+            exit $LASTEXITCODE
+          }
           vfox current
+          $python_version = $(python -c 'import sys;print(sys.version)')
+          Write-Output $python_version
+
+          if ($python_version -notlike "3.10.20*") {
+              exit 1
+          }
 
       - name: Check uv-build python 3.10.20
         if: runner.os == 'Windows' && matrix.mirror == ''

lib/util.lua

@@ -231,11 +231,11 @@ end
 local function containsTraversalSegment(value)
     local normalizedValue = string.gsub(value, "\\", "/")
     local lowerValue = string.lower(normalizedValue)
-    if string.find(lowerValue, "%%2e", 1, false) then
+    if string.find(lowerValue, "%2e", 1, true) then
         return true
     end
     for segment in string.gmatch(normalizedValue, "[^/]+") do
-        if string.sub(segment, 1, 2) == ".." then
+        if segment == ".." then
             return true
         end
     end