amitwh 5e76d77ece fix(security): harden search-in-files against DoS + path traversal ...

Address findings from automated security review:

1. Validate rootPath via validatePath/isPathAccessible before recursing,
   matching the pattern used by read-file/write-file.
2. Cap query length at 1024 chars to bound regex compilation cost.
3. Reject regexes matching classic ReDoS shapes (nested quantifiers
   and similar) before invoking RegExp.
4. Use realpathSync to resolve symlinks and verify containment under
   rootPath; drop symlinks that point outside the search root.
5. Cap total files traversed at 10000, in addition to existing
   1000-result and 2MB-per-file caps.

Add regression tests for each guard.

2026-07-23 09:34:57 +05:30

..

files

fix(security): harden search-in-files against DoS + path traversal

2026-07-23 09:34:57 +05:30

monospace

fix(security): address supply-chain + resource-leak findings

2026-07-23 09:34:57 +05:30

updater

style: run prettier formatter over src and tests

2026-06-11 20:46:00 +05:30