7c109b75

Reject unsafe relative media paths

Reject absolute paths and parent-directory escapes in RelativePath values so media lookups stay within the expected backend-relative root.

Agent Instructions

Each run corresponds to one flake attribute. Click a run for its logs and status.

Example: https://nix-ci.com/cb:mtlynch:little-moments/no-subfolder-tricks/7c109b758e1bed2a89877f045417bf11852da365/371c0bf0-f382-4316-9f74-0d087bcc2d6a

Wait for suite to complete:

curl --netrc -N https://nix-ci.com/cb:mtlynch:little-moments/no-subfolder-tricks/7c109b758e1bed2a89877f045417bf11852da365/wait

This page is also available in machine-friendly formats. Request one with the Accept header:

• curl --netrc -H 'Accept: application/json' https://nix-ci.com/cb:mtlynch:little-moments/no-subfolder-tricks/7c109b758e1bed2a89877f045417bf11852da365
• curl --netrc -H 'Accept: text/markdown' https://nix-ci.com/cb:mtlynch:little-moments/no-subfolder-tricks/7c109b758e1bed2a89877f045417bf11852da365

For more instructions, fetch https://nix-ci.com/instructions .