Skip to content

chore: sync core lib and CLAUDE.md from agent-core#90

Merged
avifenesh merged 1 commit into
mainfrom
chore/sync-core-web-ctl-20260426-152014
Apr 26, 2026
Merged

chore: sync core lib and CLAUDE.md from agent-core#90
avifenesh merged 1 commit into
mainfrom
chore/sync-core-web-ctl-20260426-152014

Conversation

@avifenesh
Copy link
Copy Markdown
Collaborator

@avifenesh avifenesh commented Apr 26, 2026

Automated sync of lib/ and CLAUDE.md from agent-core.


Note

Medium Risk
Changes file write behavior in the auto-fixer to reject symlink targets, which could affect repos that legitimately use symlinks and may surface new errors during fix/restore operations. The change is security-motivated and reduces risk of unintended writes to sensitive paths.

Overview
Hardens lib/enhance/fixer.js against symlink attacks by adding assertNotSymlink() and using it to refuse reading/writing fix targets and their .backup siblings.

applyFixes() now checks for symlinks before reading and again immediately before writing (plus before creating backups), and restoreFromBackup() similarly blocks restoring when either the backup or target path is a symlink; assertNotSymlink is exported for reuse/testing.

Reviewed by Cursor Bugbot for commit 8027446. Configure here.

@gemini-code-assist
Copy link
Copy Markdown

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

@avifenesh avifenesh merged commit 24989d1 into main Apr 26, 2026
5 checks passed
@avifenesh avifenesh deleted the chore/sync-core-web-ctl-20260426-152014 branch April 26, 2026 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant