Skip to content

Refuse a symlinked runs directory before compare - #76

Merged
EauDoon merged 1 commit into
mainfrom
cursor/compare-symlink-runs-5a98
Sep 28, 2026
Merged

EauDoon merged 1 commit into
mainfrom
cursor/compare-symlink-runs-5a98

Conversation

@EauDoon

@EauDoon EauDoon commented Sep 28, 2026

Copy link
Copy Markdown
Owner

Summary

  • summarizeRun and compareRuns now use the same runs-directory check as list, export, and prune.
  • A symlinked runs directory is rejected before any case is read, including GET /api/compare, which returns HTTP 422.
  • The outside tree is left untouched.

Test plan

  • npm test

Listing, export, and prune already rejected that link. Comparison followed it and read the target tree.
@EauDoon
EauDoon merged commit e6324a0 into main Sep 28, 2026
@EauDoon
EauDoon deleted the cursor/compare-symlink-runs-5a98 branch September 28, 2026 16:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants