security: fix path traversal vulnerability in FRI download endpoint (fixes #262)#315

Merged

pradeeban merged 3 commits intoControlCore-Project:devfrom

GaneshPatil7517:fix/path-traversal-download

Feb 14, 2026

Commits on Feb 14, 2026

security: prevent path traversal in FRI /download endpoint (fixes #262)
GaneshPatil7517
committed
security: use realpath to prevent symlink-based traversal bypass (fixes #262)
GaneshPatil7517
committed
style: replace bare except with except Exception
GaneshPatil7517
committed