fix(security): harden access checks and migration validation (#38324) (#38400)

2026-09-23 13:13:38 +09:00 · 2026-07-10 20:14:38 +02:00
parent af7ba2edef
commit ed493f0684
15 changed files with 304 additions and 15 deletions
@@ -239,7 +239,7 @@ func (r *RepositoryRestorer) GetPullRequests(_ context.Context, page, perPage in
 		if pr.PatchURL != "" {
 			pr.PatchURL = "file://" + util.FilePathJoinAbs(r.baseDir, pr.PatchURL)
 		}
-		CheckAndEnsureSafePR(pr, "", r)
+		CheckAndEnsureSafePR(pr, "file://"+r.baseDir, r)
 	}
 	return pulls, true, nil
 }