{"version":"2.1.257","anchor":"hooks-module-path-checks-tightened-for-path-traversal","canonical_anchor":"hooks-module-path-checks-tightened-for-path-traversal","heading":"Hooks module path checks tightened for path traversal","tier":"notice","area":"Plugins","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257\/e\/hooks-module-path-checks-tightened-for-path-traversal","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.257","markdown":"### Hooks module path checks tightened for path traversal\n\nA plugin hook module path of exactly two dots is now rejected, closing a traversal edge case.\n\nModule path validation for plugin hooks now also rejects a path that is exactly `..`, in addition to the existing `startsWith('..')` and resolve-mismatch checks, closing an edge case in the path-traversal guard.\n\n- Area: Plugins\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5"}