Manfred RiemandCopilot App c032a2e108 fix(extensions): add symlink/realpath containment and pin research host allowlist ...

Address the third review round on github/spec-kit#3568:

- Path safety (intake, research, define, shape, decide): slug
  normalization blocks lexical `..` but not symlinked path components.
  Each command now, before any mkdir/read/write, resolves the real path
  of .specify/assessments/<slug>/ and every artifact, refuses to follow a
  symlinked .specify / assessments / slug dir / artifact, and verifies the
  resolved path stays inside the project root. This blocks a cloned or
  crafted project from redirecting reads/writes outside the repository.
  Each stage enforces this independently since research/define/decide can
  run without intake.
- research URL policy: replaced the open-ended "and comparable well-known
  hosts" no-prompt branch with intake's exact enumerated allowlist, so an
  agent cannot classify an attacker-controlled host as "comparable" and
  fetch it without confirmation.
- README: guardrail now documents symlink/realpath containment.

Assisted-by: GitHub Copilot (model: Claude Opus 4.8, supervised)
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 1f25cf9d-b7eb-4b2b-b811-3e91d8db8f6a

2026-07-17 09:30:27 -05:00

..

speckit.assess.decide.md

fix(extensions): add symlink/realpath containment and pin research host allowlist

2026-07-17 09:30:27 -05:00

speckit.assess.define.md

fix(extensions): add symlink/realpath containment and pin research host allowlist

2026-07-17 09:30:27 -05:00

speckit.assess.intake.md

fix(extensions): add symlink/realpath containment and pin research host allowlist

2026-07-17 09:30:27 -05:00

speckit.assess.research.md

fix(extensions): add symlink/realpath containment and pin research host allowlist

2026-07-17 09:30:27 -05:00

speckit.assess.shape.md

fix(extensions): add symlink/realpath containment and pin research host allowlist

2026-07-17 09:30:27 -05:00