nanobot

Files

andienguyen-ecoligo 5c9cb3a208 fix(security): prevent path traversal bypass via startswith check

`startswith` string comparison allows bypassing directory restrictions.
For example, `/home/user/workspace_evil` passes the check against
`/home/user/workspace` because the string starts with the allowed path.

Replace with `Path.relative_to()` which correctly validates that the
resolved path is actually inside the allowed directory tree.

Fixes #888

2026-02-21 12:34:14 -05:00

tools

fix(security): prevent path traversal bypass via startswith check

2026-02-21 12:34:14 -05:00

__init__.py

🐈nanobot: hello world!

2026-02-01 07:36:42 +00:00

context.py

Merge branch 'main' into pr-939

2026-02-21 17:06:05 +00:00

loop.py

style(loop): compact empty outbound message construction