A symlink walks straight out of an agent's write allow-list
This story is from 2026-08-25. It is preserved in the archive; the latest stories are on the live feed.
Here is the path check almost every write guard ends up with, including the one I ship. It is better than the obvious version, and it is still wrong. import { isAbsolute , relative , resolve } from " node:path " ; function contains ( root , target ) { const rel = relative ( resolve ( root ), resolv…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-08-25 23:04 · DEV Community — AI
A symlink walks straight out of an agent's write allow-list