feat: Add path validation and security improvements to worktree routes

2026-03-16 21:53:07 +00:00 · 2026-02-17 10:17:23 -08:00
parent a09a2c76ae
commit f7b3f75163
3 changed files with 106 additions and 64 deletions
--- a/apps/server/src/routes/worktree/index.ts
+++ b/apps/server/src/routes/worktree/index.ts
@@ -101,7 +101,12 @@ export function createWorktreeRoutes(
    requireValidWorktree,
    createPullHandler()
  );
-  router.post('/checkout-branch', requireValidWorktree, createCheckoutBranchHandler());
+  router.post(
+    '/checkout-branch',
+    validatePathParams('worktreePath'),
+    requireValidWorktree,
+    createCheckoutBranchHandler()
+  );
  router.post(
    '/list-branches',
    validatePathParams('worktreePath'),