fix(security): reject path-traversal IDs in Google Vault, AgentMail and Algolia tools - #7266

Closed

waleedlatif1 wants to merge 5 commits into

fix/vault-agentmail-algolia-path-safety

Commits on Aug 29, 2026

fix(security): reject path-traversal IDs in Google Vault, AgentMail and Algolia tools
waleedlatif1
committed
99570e5
test(security): fuzz one path parameter at a time, not all of them at once
waleedlatif1
committed
71db59a
test(security): assert rejection per pair, drop `any`, surface skipped probes
waleedlatif1
committed
3400fc6
fix(algolia): encode separator-bearing object ids whole; assert the id slot
waleedlatif1
committed
437f72f
test(security): drop a stray format specifier from the legitimate-value test names
waleedlatif1
committed
a9f3176