Security context

Highlights

Path Traversal: 11 prior fixes. Scrutinize any change in this area.

src/validate.rs: most-fixed (4 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Path Traversal: Path validation and canonicalization logic has been repeatedly bypassed or missing when processing CLI uploads, output paths, and general resource names. Proper prefix validation must be consistently applied post-canonicalization.

Path Traversal: The chat message and space naming logic contained path formatting templates vulnerable to traversal payloads, allowing arbitrary resource modification or query injection through unvalidated workspace strings.

Path Traversal: URL and endpoint template replacement logic was susceptible to path traversal via iterative replacement injection when parsing endpoint variables, demanding single-pass rendering combined with explicit URL segment encoding.