close #60

diff --git a/.forge/issues/0c944797-1025-43bb-a382-686669c85c69/comments/f0f88bb9-aaf1-4063-9b1b-eeb336fea97a.md b/.forge/issues/0c944797-1025-43bb-a382-686669c85c69/comments/f0f88bb9-aaf1-4063-9b1b-eeb336fea97a.mdnew file mode 100644index 0000000..c98c2cc--- /dev/null+++ b/.forge/issues/0c944797-1025-43bb-a382-686669c85c69/comments/f0f88bb9-aaf1-4063-9b1b-eeb336fea97a.md@@ -0,0 +1,6 @@1+---2+id: f0f88bb9-aaf1-4063-9b1b-eeb336fea97a3+author: null4+created: 2026-10-27T15:34:16.647105515Z5+---6+Fixed in 44ea71b1 (ff f88f679). Ids/versions validated at load; write_page() refuses unsafe relative paths; tests/path_safety.rs covers issue id, PR id, absolute release version and '..' traversal.

diff --git a/.forge/issues/0c944797-1025-43bb-a382-686669c85c69/issue.md b/.forge/issues/0c944797-1025-43bb-a382-686669c85c69/issue.mdindex 0b79885..da1c998 100644--- a/.forge/issues/0c944797-1025-43bb-a382-686669c85c69/issue.md+++ b/.forge/issues/0c944797-1025-43bb-a382-686669c85c69/issue.md@@ -1,13 +1,13 @@11 ---22 id: 0c944797-1025-43bb-a382-686669c85c6933 title: 'Build-time path traversal: forge frontmatter id/version writes outside the output dir'4-state: open4+state: closed55 labels:66 - security77 assignees: []88 milestone: null99 created: 2026-10-27T14:53:25.602484238Z10-updated: null10+updated: 2026-10-27T15:34:16.634502262Z1111 ---1212 `hu13 build` writes forge pages using frontmatter values as path segments without validation, so a repo can write **arbitrary files outside the output directory**.1313