Files
Kyle a2669e33ac fix(plugins): resolve symlinks before trusting a plugin folder's location
traversePluginPath's containment check was purely lexical, so a plugin
folder that was itself a symlink to somewhere outside the configured
plugin path passed it and got require()'d from its real target with the
sandbox off. Re-check against the realpath-resolved base.
2026-07-30 16:16:49 -04:00
..