fix: validate /api/set-workspace path — reject traversal, symlink escape, non-existent (closes #15)#22

Merged

bradjin8 merged 7 commits intomasterfrom

fix/set-workspace-path-validation-15

May 8, 2026

Commits on May 5, 2026

fix: validate /api/set-workspace path — reject traversal, symlink escape, non-existent (closes #15)
timon0305
committed
fix: harden /api/set-workspace handler + traversal test (CodeRabbit on PR #16)
timon0305
committed

Commits on May 7, 2026

fix(set-workspace): wrap override persistence to keep 500 as JSON (CodeRabbit on PR #22)
timon0305
committed