zm-oai 0d9bb6c34c Harden Windows file URI conversion (#40423) ...

## What changed

- Recognize percent-encoded drive colons when inferring Windows paths, rendering
  native path strings, and resolving same-drive relative joins.
- Reject Windows file URIs with percent-encoded `/` or `\` separators before
  converting them to native absolute paths, so decoding cannot reinterpret URI
  segment boundaries.

## Testing

- Cover uppercase and lowercase encodings for drive colons and path separators,
  including local-drive and UNC file URIs.

GitOrigin-RevId: ecb6c92f4ef1af73f85e57a135abf6bc5bb968dc

2026-08-24 15:54:16 +00:00

..

absolute-path

Support execution-host context when resolving cloud config (#38086)

2026-08-11 23:31:26 +00:00

approval-presets

tui: pass active permission profiles through app commands (#22891)

2026-05-15 22:42:35 +00:00

audio

Support standalone named function call outputs (#39782)

2026-08-20 19:19:41 +00:00

cache

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

cargo-bin

build: run buildifier from just fmt (#28125)

2026-06-13 21:43:39 -07:00

cli

Retire the untrusted approval policy (#39630)

2026-08-20 07:03:02 +00:00

elapsed

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

fuzzy-match

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

home-dir

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

image

Include node_repl images in Guardian review evidence (#38454)

2026-08-13 23:29:52 +00:00

json-to-toml

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

oss

Route Ollama through the shared HTTP client (#36078)

2026-07-30 04:26:36 +00:00

output-truncation

Preserve audio across history and tool outputs (#34385)

2026-07-20 17:36:44 +00:00

path-uri

Harden Windows file URI conversion (#40423)

2026-08-24 15:54:16 +00:00

path-utils

Avoid redundant filesystem probes (#36393)

2026-07-31 21:37:56 +00:00

plugins

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

pty

Prevent ConPTY DLL loading from the current directory (#39262)

2026-08-18 19:09:33 +00:00

readiness

[codex] Remove async_trait from first-party code (#27475)

2026-06-11 18:16:39 -07:00

redacted-string

Keep credentials out of app-server logs (#39993)

2026-08-21 19:04:32 +00:00

rustls-provider

Use aws-lc-rs for rustls crypto provider (#27706)

2026-06-15 11:32:13 -07:00

sandbox-summary

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

sleep-inhibitor

Keep feature tests focused on behavior (#33864)

2026-07-17 16:17:29 +00:00

stream-parser

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

string

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

template

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00