SiYuan: MCP File Tool's Blocklist Is Incomplete Relative To The HTTP File API It Claims To Align With, Exposing Publish-

Summary "kernel/mcp/tools/file.go"'s "resolvePath" includes an explicit comment stating its sensitive-path blocklist is meant to align with the HTTP file API's established blacklist "refuseToAccess" in "kernel/api/file.go", following the remediation for GHSA-cvhv-7xhj-xjp8 "Unauthenticated...