Skip to content

fix(security): resolve CodeQL path-injection and invalid-pointer alerts - #221

Open
austin-liminal wants to merge 1 commit into
mainfrom
worktree-fix-codeql-alerts
Open

fix(security): resolve CodeQL path-injection and invalid-pointer alerts#221
austin-liminal wants to merge 1 commit into
mainfrom
worktree-fix-codeql-alerts

fix(security): resolve CodeQL path-injection and invalid-pointer alerts

76c15a3
Select commit
Loading
Failed to load commit list.
MacroscopeApp / Macroscope - Approvability Check completed Mar 16, 2026 in 27s

Not approved (correctness)

  • Eligibility
  • Correctness

Note

More information about how approvability works can be found in our Help Center.

Details

Eligibility
This PR addresses CodeQL static analysis alerts through defensive refactoring of cache path validation (replacing path containment checks with explicit hex-digit validation) and CI configuration updates. The author owns all changed files, and the changes strengthen security posture rather than introducing risk.

Notes:
@austin-liminal is a code owner of all the files changed in this PR.

Correctness
Unable to check for correctness in 76c15a3