Open
Description
For example:
c:\git\claude-files
Will fail, where:
C:\git\claude-files
Will succeed, because otherwise this will fail, when Windows returns the real path with a capital C:
func (s *FilesystemServer) validatePath(requestedPath string) (string, error) {
....
// Check if the real path (after resolving symlinks) is still within allowed directories
if !s.isPathInAllowedDirs(realPath) {
return "", fmt.Errorf(
"access denied - symlink target outside allowed directories",
)
}
return realPath, nil
}
Metadata
Metadata
Assignees
Labels
No labels