fix: restrict OpenAPI references to local workdir files - #63

Draft

cloudcarver wants to merge 1 commit into

mainfrom

agent/security-openapi-local-refs

cloudcarver commented Jul 31, 2026

Owner

Summary

reject HTTP, HTTPS, and other non-file OpenAPI references
canonicalize local references and constrain them to the selected workdir
reject symlink escapes and non-regular reference targets
add tests proving remote servers are never contacted

Validation

go test ./...
go test -race ./pkg/openapi/bundle
go vet ./...

Closes #51


          fix: restrict OpenAPI references to workdir

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet