matevip 26dd8a37d5 fix(workspace): harden chat-upload base-path containment + cleanup guard ... - resolveAgentBasePath: the relative-override branch now normalizes the resolved path and rejects values that escape the workspace root via "../" (the absolute branch already did this), keeping attachment/media/tool I/O contained when an agent's workspaceBasePath is a relative override. - cleanAttachmentFiles: return early on a null/blank conversationId so a bare upload root can never be walked and deleted wholesale. - Translate the chat-upload Javadoc/comments to English (cleanAttachmentFiles, BaseAgent image-path resolver) per code style. - Add a resolver test for the relative-override escape fallback.		2026-06-26 14:25:56 +08:00
..
src	fix(workspace): harden chat-upload base-path containment + cleanup guard	2026-06-26 14:25:56 +08:00
Dockerfile	fix(docker): honor SPRING_PROFILES_ACTIVE instead of pinning the mysql profile	2026-06-14 16:47:16 +08:00
pom.xml	fix(db): make KingbaseES driver opt-in and restore default SSRF guard	2026-06-14 10:34:35 +08:00
settings.xml	build(maven): declare US + CN repositories in pom.xml, drop opaque mirror	2026-04-25 09:56:17 +08:00