(commons-text) 01/03: Fix path fence bypass for relative paths with leading ".." #745.

[gg...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

garydgregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-text.git

commit 124222e043ca6f5b19f465c80d0cebae8d87f8b1
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Mon Jun 1 12:25:44 2026 -0400

    Fix path fence bypass for relative paths with leading ".." #745.
---
 src/changes/changes.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 34adc87c..5274362c 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -52,6 +52,7 @@ The <action> type attribute can be add,update,fix,remove.
       <action type="fix" dev="ggregory" due-to="Omkhar Arasaratnam, Gary Gregory">FormattableUtils.append re-parses literal output as format string (#743).</action>
       <action type="fix" dev="ggregory" due-to="Omkhar Arasaratnam, Gary Gregory">StrBuilder.replaceImpl() shrink-branch leaves residual chars in buffer tail.</action>
       <action type="fix" dev="ggregory" due-to="Omkhar Arasaratnam, Gary Gregory">StrBuilder.setLength() shrink-branch leaves residual chars in buffer tail.</action>
+      <action type="fix" dev="ggregory" due-to="Javid Khan, Gary Gregory">Fix path fence bypass for relative paths with leading ".." #745.</action>
       <!-- ADD -->
       <!-- UPDATE -->
       <action type="update" dev="ggregory" due-to="Gary Gregory">Bump org.apache.commons:commons-parent from 93 to 100.</action>