orion-ecs / keen-eye / 20215420054 / 1

65%

main: 65%

push

github

fix: Add path traversal protection for save slot names

Address CodeQL security warnings from issue #349 by adding slot name
validation to prevent path traversal attacks.

Changes:
- Add SlotNameValidator class to validate slot names and reject path
  separators, ".." sequences, and invalid filename characters
- Integrate validation into SaveManager.GetSlotFilePath
- Integrate validation into EncryptedPersistenceApi.GetSlotFilePath
- Add unit tests for slot name validation (rejects invalid names)
- Add delta compression tests (verify reduced file sizes)
- Add test for skipped delta when no changes detected

Note: True delta saves (item 1 in issue) were already implemented in
AutoSaveSystem.SaveDelta using DeltaDiffer - no changes needed there.

Closes #349

1856 of 2015 branches covered (92.11%)

Branch coverage included in aggregate %.

10148 of 11108 relevant lines covered (91.36%)

1.44 hits per line