nntrivi2001 2ade30f670 fix(cc-config): close the symlink write escape and the caller-chosen write target ...

The Claude writer's containment was lexical only: a symlink at
~/.claude/<type>/<name>, or at any ancestor of it, is a string inside the
root while the write lands wherever it points. The backup destination had
the same exposure, and delete copies through the link before unlinking it.

PUT/DELETE /file also honoured ?cwd=, so a project-scope write could be
aimed at any directory on disk. PATCH /settings already refused that, with
the reasoning in a comment; the two other write routes never adopted it.

The guard moves into config-write.js so both writers run one copy.

2026-09-09 08:30:45 +07:00

5.6 KiB

Raw Permalink Blame History

View Raw