Skip to content

fix(fs): refuse unsafe Node.js storage paths - #17

Merged
coreybutler merged 1 commit into
mainfrom
fix/nvm4313-install-root-guard
Oct 24, 2026
Merged

coreybutler merged 1 commit into
mainfrom
fix/nvm4313-install-root-guard

Conversation

@coreybutler

Copy link
Copy Markdown
Contributor

Summary

  • Refuse Node.js storage in Windows, Program Files, profile, AppData, the NVM program folder, parents of those paths, and UNC (NVM4313).
  • nvm config set root= and config.Prepare fail closed before registry write.

Test plan

  • go test in fs and settings (default installs path allowed; Program Files, profile, C:\Users refused)

Uninstall DelTree of a profile or Program Files root can hide
or delete other software. NVM4313 blocks those locations.

Signed-off-by: Corey Butler <770982+coreybutler@users.noreply.github.com>
@coreybutler
coreybutler merged commit c0c55be into main Oct 24, 2026
2 checks passed
@coreybutler
coreybutler deleted the fix/nvm4313-install-root-guard branch October 24, 2026 20:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant