mirror of
https://github.com/NicolasBohn/NexQuant.git
synced 2026-07-27 23:47:46 +00:00
820c27f91b
- Use os.path.realpath for full resolution (handles symlinks and ..) - Reject drive letters explicitly via os.path.splitdrive - Reject absolute paths via os.path.isabs (not Path.is_absolute) - Build candidate via os.path.join then resolve - Validate with Path.relative_to after realpath resolution - Fixes py/path-injection alert #3 - Preserves existing functionality