mathiasandClaude Opus 5.5 87dace37b1 fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) ...

os.Root follows an intermediate directory symlink that stays inside the
brain. A dir symlink inside wiki/ pointing elsewhere in the brain let
brain_update and brain_tunnel rewrite an existing .md there (e.g. under
raw/), and session_log followed a symlinked sessions dir.

- WriteRegular, ReadRegular and ReadRegularMax require every directory
  above the file to be a real directory (realDir). Reads too: brain_tunnel
  read the redirected target, then rewrote the source before the target's
  write was refused; and brain_read/brain_get could read another part of
  the brain through such a path.
- session.Append refuses a sessions dir that is not a real directory.
- A directory swapped in after the check remains the #167 residual.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-05 20:54:00 +02:00

..

cmd

fix(ingestion): build /mcp's bearer and the metrics wrap inside buildMux (#154) (#183)

2026-10-05 17:48:44 +00:00

internal

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173)

2026-10-05 20:54:00 +02:00

Dockerfile

fix(ci): allow ingestion Dockerfile to fetch internal gitea modules

2026-05-22 12:12:09 +02:00

go.mod

fix(ingestion): bump mcp-chassis to v0.7.1; log auth rejections; label refused REST requests by route (#181)

2026-10-05 14:40:20 +00:00

go.sum

fix(ingestion): bump mcp-chassis to v0.7.1; log auth rejections; label refused REST requests by route (#181)

2026-10-05 14:40:20 +00:00