fix(loader): confine $ref to the contract's directory tree - #687

Merged

fas89 merged 9 commits into

mainfrom

fix/loader-confines-ref

Oct 2, 2026

Commits on Oct 2, 2026

fix(loader): confine $ref to the contract's directory tree
fas89
committed
bbd5aa1
fix(loader): a FLUID_REF_ROOT outside the contract falls back, not fails
fas89
committed
4b0ee86
fix(loader): an escape after an ignored FLUID_REF_ROOT says it was ignored
fas89
committed
38d3224
fix(loader): an FLUID_REF_ROOT that cannot be resolved falls back too
fas89
committed
7d2cd0c
chore(secrets): mark the leak-test sentinel as a test value, and follow AGENTS.md's moved line
fas89
committed
87251e1
fix(loader): a ref root that is a symlink loop reads "cannot be resolved" on Python 3.13+ too
fas89
committed
fa0ff2b
fix(tests): the env-root widening test runs again, instead of hiding inside a fixture
fas89
committed
cbcff2f
docs: describe the threat model, not a product
fas89
committed
49c8f9e
style(loader): say in the except clause why a missing ref root is let through
fas89
committed
853a8f5