fix: prevent path traversal (CWE-22) in corpus and data path functions - #1342

Merged

bact merged 15 commits into

devfrom

copilot/fix-security-path-manipulation

Mar 19, 2026

Commits on Mar 18, 2026

Initial plan
Copilot
committed
fix: prevent path traversal in get_full_data_path, path_pythainlp_corpus, and get_path_folder_corpus

Copilot
and
wannaphong
committed
refactor: consolidate path traversal check into _safe_path_join; fix tests

Copilot
and
bact
committed

Commits on Mar 19, 2026