Mahima Shanware a5c2bf81f4 fix(core): remove redundant ENOENT fallback in getPlansDir to fix traversal vulnerability ...

This removes the insecure ENOENT fallback in `Storage.getPlansDir` that could be exploited to bypass the `isSubpath` check via symlinks. The fallback was unnecessary because the underlying `resolveToRealPath` function (via `robustRealpath`) was recently updated to gracefully handle and resolve symlinks for non-existent target paths.

2026-04-07 16:35:24 +00:00

..

a2a-server

fix(cli): remove -S from shebang to fix Windows and BSD execution (#24756)

2026-04-06 19:06:56 +00:00

cli

fix(cli): consistently clear sticky extension context

2026-04-07 16:35:23 +00:00

core

fix(core): remove redundant ENOENT fallback in getPlansDir to fix traversal vulnerability

2026-04-07 16:35:24 +00:00

devtools

Add instructions for how to start react in prod and force react to prod mode (#24590)

2026-04-03 04:42:32 +00:00

sdk

…

test-utils

chore(test-utils): switch integration tests to use PREVIEW_GEMINI_MODEL (#24276)

2026-03-31 00:31:04 +00:00

vscode-ide-companion

Add instructions for how to start react in prod and force react to prod mode (#24590)

2026-04-03 04:42:32 +00:00