mirror of
https://github.com/storytold/photocraft.git
synced 2026-10-30 03:02:19 +01:00
9ef9992878
* fix(automation): block ambient filesystem bypasses Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: e77cd34a-ce3e-4981-996f-4d37d49df90d * test(automation): cover ambient path denial Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: e77cd34a-ce3e-4981-996f-4d37d49df90d * fix(automation): guard filesystem path authorization Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: e85c024b-ace5-4415-9208-b8d4e4684505 * automation: judge the first non-empty prefs segment; refuse any path without data prefs.set skips empty path segments, so `.scriptEvents.enabled` reached script events past the section check. Preset import / plugin.install with a whitespace path also read the filesystem. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <echelon@gmail.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Copilot-Session: e77cd34a-ce3e-4981-996f-4d37d49df90d Copilot-Session: e85c024b-ace5-4415-9208-b8d4e4684505