fix(sec): resolve CodeQL CWE-22 path-injection (#90,#86) and weak-hash (#84)#57

Merged

cdeust merged 3 commits into

mainfrom

fix/codeql-pathinj-weakhash

Jun 9, 2026

Commits on Jun 9, 2026

fix(sec): resolve CodeQL CWE-22 path-injection (#90,#86) and weak-hash (#84)

cdeust
and
claude
committed
fix(sec): inline commonpath guard to dominate is_dir sink (CodeQL #57)

cdeust
and
claude
committed
fix(sec): break CWE-22 taint via trusted scandir descent (CodeQL #57)

cdeust
and
claude
committed