Files
Haris f51340ecd5 Merge commit from fork
Harden get_excel_path() for SSE and streamable-http transports:
- Reject absolute paths supplied by remote clients
- Resolve and validate relative paths stay within EXCEL_FILES_PATH
- Reject filenames containing NUL bytes

Add tests/test_sandbox_paths.py covering bypass vectors.
Bump version to 0.1.8.

Made-with: Cursor
2026-04-12 11:08:01 +05:00
..
2026-04-12 11:08:01 +05:00