You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Managed SettingsArea: what it touches
ImprovementsKind: in v2.1.232,
ImprovementsSection of the release
What
The managed-settings policy helper path check now rejects . and .. segments, doubled or trailing separators, and on Windows requires a drive-qualified or UNC path with no device-namespace prefix. This is on top of the existing absolute-path and .exe checks, and failures return code: "bad_path".
Details
The check also moved inside the runner, so it applies at the point the helper is invoked.
Evidence
path must be in normalized form (no "." or ".." segments, no doubled or trailing separators)
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
