谢栋梁 91ffb51564 fix: use Path.is_relative_to() for cross-platform dangerous path detection ...

Replace string prefix matching with Path.is_relative_to() to correctly
handle Windows paths like "C:\" where trailing backslash caused double
separator issues (e.g., "C:\\" instead of "C:\").

Changes:
- Use Path.is_relative_to() for subdirectory detection (requires Python 3.9+)
- Add Windows path handling tests using PureWindowsPath
- Update test_utils.py to expect /etc/passwd to be blocked (security fix)

2025-12-05 13:53:39 +08:00

8.5 KiB

Raw Blame History

View Raw