Fix #2160: sanitise agent_id and learning_id paths in markdown_store (CWE-22) - #903

Closed

AlexMikhalev wants to merge 10 commits into

mainfrom

task/2160-path-traversal-markdown-store

Commits on Jun 3, 2026

fix(agent): classify HTTP 4xx as ErrorGeneral not ErrorNetwork Refs #1992

Test User
and
claude
committed
4dc7c16
test(agent): add server_http_error_exits_1 integration test Refs #1992

Test User
and
claude
committed
4cfc5be

Commits on Jun 4, 2026

feat(pr-reviewer): agent work [auto-commit]
Test User
committed
fedb78e
feat(pr-validator): agent work [auto-commit]
Test User
committed
b9358ed
fix(rolegraph): add serde(default) to trigger_descriptions and pinned_node_ids Refs #2039

Test User
and
claude
committed
252eac5
feat(pr-reviewer): agent work [auto-commit]
Test User
committed
65756a5
fix(clippy): flatten manual_flatten in server_http_error test Fixes #2133

Test User
and
claude
committed
113ced5
feat(pr-reviewer): agent work [auto-commit]
Test User
committed
c5bf286
fix(agent): gate firecracker module and ApiClient VM methods with cfg(feature = "firecracker")

Test User
and
claude
committed
d13f139
fix(security): sanitise agent_id and learning_id in markdown_store paths (CWE-22)
Test User
committed
bf6ed20