External directory permission does not work on Windows

[pschiel]

Steps to reproduce

• setup external_directory permission
• ask agent to write a file to a different drive
• agent writes files without asking

Root Cause

In a Windows environment with mixed paths (Windows, MSYS/GitBash) the Wildcard/Permission system breaks in several cases (relative paths, absolute paths / cross-drive) due to path mismatching.

#6763 fixes this via path normalization

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• Path traversal vulnerability via symlinks and cross-drive paths #8313: Path traversal vulnerability via symlinks and cross-drive paths

Feel free to ignore if none of these address your specific case.

[OpeOginni]

Do you mean the agent writes file to that external_directory you just set?