fix: address CodeQL code-scanning alerts - #54

Merged

skyoo2003 merged 6 commits into

mainfrom

fix/code-scanning-vulnerabilities

Apr 30, 2026

Commits on Apr 29, 2026

fix: address CodeQL code-scanning alerts for path injection and allocation size
skyoo2003
committed
9fbb3dd
refactor: use filepath.Rel for path containment checks per review
skyoo2003
committed
8e53ae2
fix: construct dir path directly to resolve CodeQL taint propagation
skyoo2003
committed
1c3d48c
refactor: extract IsWithinDir to shared package
skyoo2003
committed
f87da42
fix: break CodeQL taint chains in Lambda and S3 multipart cleanup
skyoo2003
committed
b31d19b
fix: return S3 XML error from uploadPart on invalid partPath
skyoo2003
committed
23d9d78