Émile Ré f0fe70fe1c Restore url.PathEscape on user-supplied path segments in url.JoinPath calls ...

url.JoinPath does not percent-encode slashes or reserved characters in
its arguments, so user-supplied values (group IDs, slugs, team IDs) must
be wrapped with url.PathEscape to prevent path traversal. Update cursor
rule and contrib guide to codify this as a mandatory practice.

Signed-off-by: Émile Ré <emile@probo.com>

2026-05-20 12:57:26 +04:00

..

claude

Restore url.PathEscape on user-supplied path segments in url.JoinPath calls

2026-05-20 12:57:26 +04:00

helm

Move Firecrawl API key from top-level config into Agents.Tools

2026-05-19 12:32:41 +04:00

lima

Upgrade go to 1.26.3

2026-05-08 13:46:14 +04:00

merge-graphql-schema.sh

Fix Relay generating null query text for mutations

2026-04-15 09:19:41 +04:00

seed.sh

Rename vendors to third parties

2026-05-13 21:21:39 +02:00