The centralized capture-file writer uses restrictive permissions but does not require exclusive creation. A local pre-planted symlink could therefore redirect a capture write.
Harden the writer with exclusive-create semantics or an equivalent containment guard, while preserving any intentional overwrite behavior, and add a regression test for a pre-existing symlink.
This is a local-access hardening follow-up; captured website content is not the threat actor.
The centralized capture-file writer uses restrictive permissions but does not require exclusive creation. A local pre-planted symlink could therefore redirect a capture write.
Harden the writer with exclusive-create semantics or an equivalent containment guard, while preserving any intentional overwrite behavior, and add a regression test for a pre-existing symlink.
This is a local-access hardening follow-up; captured website content is not the threat actor.