mirror of
https://github.com/mikumifa/biliTickerBuy.git
synced 2026-09-20 21:28:03 -04:00
wanlsl
a245ae9f65
* fix: harden local runtime and Windows CLI * fix: align PR formatting and license metadata * test: remove audit regression test file * fix: reject managed run path aliases The traversal guard previously accepted a symlink or junction that resolved to the managed-runs root. Compare the lexical candidate with its resolved path and require a direct child so delete operations cannot target the root or another aliased directory.