sayan-oai 530c1aed58
Prevent apply_patch from widening write permissions ( #39614 ) ...
## Why
Deriving permissions from the parent of an already-writable patch target can
unnecessarily grant write access outside the intended workspace.
## What changed
Skip targets already covered by the active filesystem sandbox policy before
deriving additional parent-directory permissions. Targets outside the writable
area continue to request the required parent access.
## Testing
Added unit and CLI regression coverage for workspace-directory targets,
already-writable parents, and symlink escapes outside the workspace.
GitOrigin-RevId: 187109ff0b56a1a399cb8a9981b7e822977025d5
2026-08-20 06:21:54 +00:00
2026-08-19 15:55:38 +00:00
2026-08-20 06:13:28 +00:00
2026-08-18 23:05:52 +00:00
2026-08-18 23:47:00 +00:00
2026-08-17 04:01:37 +00:00
2026-08-16 06:48:59 +00:00
2026-08-10 18:44:58 +00:00
2026-08-10 01:39:55 +00:00
2026-08-18 23:47:00 +00:00
2026-08-11 03:39:02 +00:00
2026-08-14 05:03:39 +00:00
2026-08-17 22:37:14 +00:00
2026-08-20 05:24:56 +00:00
2026-08-18 23:47:00 +00:00
2026-08-13 19:35:22 +00:00
2026-08-14 20:42:35 +00:00
2026-08-15 21:26:28 +00:00
2026-08-14 22:40:19 +00:00
2026-08-19 15:37:26 +00:00
2026-08-18 18:41:40 +00:00
2026-08-18 23:47:00 +00:00
2026-08-13 23:13:37 +00:00
2026-08-20 05:21:09 +00:00
2026-08-04 22:58:02 +00:00
2026-08-20 05:24:56 +00:00
2026-08-07 00:23:38 +00:00
2026-08-03 11:39:51 +00:00
2026-08-20 06:21:54 +00:00
2026-08-19 01:26:16 +00:00
2026-08-20 05:24:56 +00:00
2026-08-07 11:30:17 +00:00
2026-08-13 00:00:16 +00:00
2026-08-18 23:05:52 +00:00
2026-08-18 21:30:45 +00:00
2026-08-17 21:49:30 +00:00
2026-08-17 04:37:50 +00:00
2026-08-19 11:59:23 +00:00
2026-08-19 01:06:12 +00:00
2026-08-19 09:01:23 +00:00
2026-08-18 21:46:18 +00:00
2026-08-17 21:49:30 +00:00
2026-08-10 15:50:53 +00:00
2026-08-18 12:37:41 +00:00
2026-08-18 23:23:23 +00:00
2026-08-17 00:09:44 +00:00
2026-08-10 22:12:14 +00:00
2026-08-20 05:03:49 +00:00
2026-08-19 00:28:52 +00:00
2026-08-17 10:01:59 +00:00
2026-08-20 05:29:12 +00:00
2026-08-19 04:46:58 +00:00
2026-08-19 04:46:58 +00:00
2026-08-17 23:08:26 +00:00
2026-08-18 21:30:45 +00:00
2026-08-17 19:06:53 +00:00
2026-08-10 14:25:13 +00:00
2026-08-17 21:49:30 +00:00
2026-08-19 01:26:16 +00:00
2026-08-15 01:34:33 +00:00
2026-08-20 06:17:48 +00:00
2026-08-18 23:05:52 +00:00
2026-08-06 03:11:42 +00:00
2026-08-20 05:36:23 +00:00
2026-08-10 15:43:10 +00:00
2026-08-20 06:03:25 +00:00
2026-08-08 16:58:26 +00:00
2026-08-20 06:10:03 +00:00
2026-08-20 05:16:59 +00:00
2026-08-04 03:49:53 +00:00
2026-08-18 00:45:00 +00:00
2026-08-19 16:20:21 +00:00
2026-08-14 05:49:33 +00:00
2026-08-20 05:54:19 +00:00
2026-08-20 05:10:57 +00:00
2026-08-18 21:56:54 +00:00
2026-08-15 14:31:04 +00:00
2026-08-20 06:17:48 +00:00
2026-08-19 11:59:23 +00:00
2026-08-18 22:00:25 +00:00
530c1aed58