fix(openshell-sandbox): reject symlink and non-dir read_write paths#347

Closed

drew wants to merge 1 commit intoNVIDIA:mainfrom

vincentkoc:codex/fix-symlink-vulnerability-in-sandbox-chown

Commits on Mar 16, 2026

fix(openshell-sandbox): reject symlink and non-dir read_write paths
vincentkoc
committed