summaryrefslogtreecommitdiff
path: root/docs/_static/css/code-snippets.css
diff options
context:
space:
mode:
authorYuriy Andamasov <yuriy@vyos.io>2026-05-11 01:39:34 +0300
committerYuriy Andamasov <yuriy@vyos.io>2026-05-11 01:39:34 +0300
commit1a32a3b0d41634f9afb8024d7a1266cded4f3b3b (patch)
tree566fef7dead83d744ebfaf1b627d7dd1b2e8c850 /docs/_static/css/code-snippets.css
parent31fdde0870204caa246ab58331d11a3ed0a52c25 (diff)
downloadvyos-documentation-1a32a3b0d41634f9afb8024d7a1266cded4f3b3b.tar.gz
vyos-documentation-1a32a3b0d41634f9afb8024d7a1266cded4f3b3b.zip
ci(ai-validation): fail-fast on traversal paths (consistency w/ non-regular guard)
Copilot finding on PR #1959 (line 114): the path-traversal hardening block used `continue` (skip-with-warning) on detection of absolute / traversal paths, but the non-regular-tree-entry check below uses `exit 1`. The asymmetry meant a fork PR that smuggles in a path like `docs/../../outside.md` would silently bypass Pass 1 (no file copied into _changed_md/) and Pass 2 (LLM Read/Glob/Grep tools see no content) — reducing validation coverage on exactly the inputs that warrant the closest look. Change `continue` to `exit 1` so both unsafe-input checks have consistent visible-failure semantics. Maintainers must explicitly address an offending path rather than have it skipped. Mirrored byte-identically across all three open workflow PRs.
Diffstat (limited to 'docs/_static/css/code-snippets.css')
0 files changed, 0 insertions, 0 deletions