Repository navigation

fix: escape FUSE path before JSON interpolation in fuse-helper.c - #6

Closed

kinjo12 wants to merge 4 commits into

kinjo12:fix/fuse-json-injection

Commits on Sep 12, 2026

fix: scope crm.toml resolution to project directory + hooks trust-on-first-use gate (#5)
kinjo12
authored
af4bad5
fix: sanitize user-controlled path segments in export-fs (path traversal) (#8)
kinjo12
authored
016c6ad
test: cover fuse-helper.c JSON injection via unescaped getattr path
kinjo12
committed
fca3d6d
fix: escape FUSE path before interpolating into JSON in fuse-helper.c
kinjo12
committed
88fe617