Rip&Tear 96383abd8b fix: prevent path traversal in FileWriterTool without interface changes ...

Adds containment check inside _run() using os.path.realpath() to ensure
the resolved file path stays within the resolved directory. Blocks ../
sequences, absolute filenames, and symlink escapes transparently —
no schema or interface changes required.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-16 00:16:13 +08:00

..

adapters

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

cassettes/tools

feat: native multimodal file handling; openai responses api

2026-01-23 15:13:25 -05:00

rag

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

tools

fix: prevent path traversal in FileWriterTool without interface changes

2026-03-16 00:16:13 +08:00

__init__.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

base_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

file_read_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_generate_tool_specs.py

limit stagehand dep version to 0.5.9 due breaking changes (#4339)

2026-02-03 09:43:24 -05:00

test_optional_dependencies.py

fix: fix double trace call; add types

2025-10-21 14:15:39 -04:00