curo1305 6e138bcec2 fix: remove self-defeating assert_safe_path from vault modules, clarify traversal test scope ...

vault/reader.py, vault/writer.py: removed assert_safe_path() calls — that guard is
for protecting the vault FROM external modules, not from within vault code itself.
Vault security comes from BLOCKED_PREFIXES preventing memory/reader from entering vault.

test_path_traversal.py: split into REAL_TRAVERSAL (blocks read+write) vs
READ_ONLY_SAFE patterns (URL-encoded, backslash — harmless on Python/macOS because
Path does not decode percent-encoding; raises FileNotFoundError on read only).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-17 12:59:59 +02:00

..

integration

test: comprehensive test suite

2026-05-17 12:55:06 +02:00

security

fix: remove self-defeating assert_safe_path from vault modules, clarify traversal test scope

2026-05-17 12:59:59 +02:00

unit

test: comprehensive test suite

2026-05-17 12:55:06 +02:00

__init__.py

chore: init project skeleton

2026-05-17 12:48:32 +02:00

conftest.py

test: comprehensive test suite

2026-05-17 12:55:06 +02:00