fix(artifacts): admit selected app bundle traversal

This commit is contained in:
morluto committed 2026-10-27 09:48:52 +08:00
1 parent 15a8f6847c
commit f878266503
3 files changed
+60 -1

No files matched your search

+3
View File
@@ -119,6 +119,9 @@ export const findAppBundleResourceRoot = async (
options.cwd === undefined ? {} : { cwd: options.cwd },
);
try {
// Admit the selected spelling before Darwin realpath can collapse file/..
// into a different, otherwise valid bundle resource root.
await stat(callerPath);
const canonicalInput = await realpath(callerPath);
const directLayout = await presentLayout(canonicalInput);
const wrapped =