Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
In DevelopmentKind: in v2.1.251,
In DevelopmentSection of the release
What
A new check walks a directory path one segment at a time and refuses it unless every segment is owned by the current user and is not a symlink, finally confirming the resolved real path matches the expected target. On Linux and WSL it uses open-by-handle checks; elsewhere it falls back to creating the directories and stat-checking them.
Details
No code in this build calls it, so nothing yet routes through this stricter check.
Evidence
aI | Zn.O_DIRECTORY | Zn.O_NOFOLLOW
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
