2 Commits

Author	SHA1	Message	Date
Joseph Doherty	ebc493361e	fix(secrets): audit malformed ${secret:} tokens, cap SecretName at 450, resolve local UNC shares (scadaproj#52) ... Claude-Session: https://claude.ai/code/session_01GT67AEHd2Acv1YPwGfXEoV	2026-11-09 15:38:36 -05:00
Joseph Doherty	eff8c6a00e	fix(secrets): store-path rules compare locations, not spellings (scadaproj#45) ... Secrets-005: AddIfNotRooted now uses Path.IsPathFullyQualified, so Windows drive-relative (C:secrets.db) and root-relative (\secrets.db) paths are rejected. AddIfUnderContentRoot refuses a store if EITHER its spelled location (device prefix stripped, loopback admin share mapped to its drive) OR its resolved location (symlinks/junctions followed, 8.3 names expanded on Windows) is under the likewise-resolved content root. A store spelled through the content root stays refused even if a link inside carries it elsewhere. UNC paths through other shares are compared as written. Claude-Session: https://claude.ai/code/session_01GT67AEHd2Acv1YPwGfXEoV	2026-11-09 15:32:28 -05:00