Post #1332940
2026-03-18 15:04 UTC
@indutny what are the odds that, given the first several reviews are “can we use path.join” on a bunch of lines that are using string concatination for constructing paths, they have introduced several directory traversal attacks in this thing?
Replies (1)
-
@nielsa@mas.to 2026-03-19 09:22
@cthos @indutny I was thinking about the same thing, also vis-a-vis other replies here about how large and one-shot the PR is. Claude has gotten really good at producing code that *looks* right (that is, hides errors well), and trying to find them in 19k lines is just...