NoNE 29bf16c673 Reject ambiguous resource paths with inner ".." to prevent silent misresolution (#6087) ...

* Reject paths with inner '..' in FileLoader.New to prevent silent misresolution

* Refactor hasInnerDotDot to two-phase loop eliminating mutable state

* Narrow check to embedded '..' segments to allow legitimate winding paths

* Fix gofmt alignment and trailing whitespace in new test functions

* Fix pre-existing lint errors in fileloader_test.go

2026-03-25 20:50:19 +05:30

10 KiB

Raw Blame History

View Raw