Dylan M. Taylor 063a7b9502 Automation: a confined batch can't take a step's params from a reference, and renders refuse folders with outward links (#2930) ...

* automation: confine batch steps whose params are a reference, and sequence render folders holding outward links

A confined engine.batch checked each step's file parameters before the batch
ran, but a step whose whole params was a `$N` reference became an earlier
step's result only at run time, so a file path in that result (for example a
manifest from essential.templateInfo) reached file.saveAs unchecked. Such
steps are now refused while file access is confined.

An image-sequence render writes numbered frame names that the check of its
output template never resolved, and each frame is created through any link
already at its name. A render output whose folder holds a link leading
outside the write roots (or one that cannot be resolved) is now refused when
it is queued and again when the queue renders.

* address review: check numbered render folders for outward links

* address review: fail closed when the numbered-folder scan cannot list its parent; unix-only symlink test

* address review: render-folder link scan fails closed on unreadable folders, entries and file types

2026-11-11 14:37:58 -05:00

..

src

Automation: a confined batch can't take a step's params from a reference, and renders refuse folders with outward links (#2930)

2026-11-11 14:37:58 -05:00

tests/qa

Naming: descriptive names for the CC effects, Lumetri, Mocha, Keylight and Mercury (#3327)

2026-11-09 04:51:10 +01:00

Cargo.toml

Disk cache: entries keep the files they read, keys from memory (#3184) (#3191)

2026-11-08 02:30:59 +01:00