{"version":"2.1.261","anchor":"sandbox-write-path-restore-skips-symlinks-pointing-outside-e","canonical_anchor":"sandbox-write-path-restore-skips-symlinks-pointing-outside-e","heading":"Sandbox write-path restore skips symlinks pointing outside expected location","tier":"notice","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.261\/e\/sandbox-write-path-restore-skips-symlinks-pointing-outside-e","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.261","markdown":"### Sandbox write-path restore skips symlinks pointing outside expected location\n\nSandbox write-path restore now skips symlinks that point outside the expected location.\n\nOn Linux sandboxing, restoring bind-mounted write paths now resolves symlinks with `realpathSync` first. If a symlink's resolved target differs from the expected location and points outside it, the path is skipped (with a log message: \"Skipping write-path restore for symlink pointing outside expected location\") instead of being blindly re-bound.\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5"}