fix: address Cubic round-5 P1/P2 issues

- P1: add path traversal guard to getMessageDir (reject .., /, \) - P2: treat unknown part types as non-content in messageHasContentFromSDK
2026-02-16 14:59:10 +09:00
parent 885c8586d2
commit 3fe9c1f6e4
3 changed files with 25 additions and 2 deletions
@@ -31,8 +31,6 @@ function messageHasContentFromSDK(message: SDKMessage): boolean {
    }

    if (TOOL_TYPES.has(type)) return true
-
-    return true
  }

  return false