{"record":{"id":"e34bc26325350515","repo":"BigPizzaV3/CodexPlusPlus","slug":"dream-skin-theme-path-is-not-a-safe-directory","errorCode":null,"errorMessage":"Dream Skin theme path is not a safe directory","messagePattern":"Dream Skin theme path is not a safe directory","errorType":"validation","errorClass":"anyhow::Error","httpStatus":null,"severity":"error","filePath":"crates/codex-plus-core/src/dream_skin_library.rs","lineNumber":377,"sourceCode":"        let _ = remove_known_theme_directory(&staging);\n        return Err(error);\n    }\n    let stored = load_stored_dream_skin_theme(state_dir, &config.id)?;\n    Ok(summary_from_draft(&stored, false, false))\n}\n\npub fn load_stored_dream_skin_theme(\n    state_dir: &Path,\n    id: &str,\n) -> anyhow::Result<DreamSkinThemeDraft> {\n    if !valid_theme_id(id) {\n        bail!(\"invalid Dream Skin theme id\");\n    }\n    let directory = state_dir.join(THEMES_DIR).join(id);\n    let metadata = std::fs::symlink_metadata(&directory)\n        .with_context(|| format!(\"Dream Skin theme not found: {id}\"))?;\n    if !metadata.file_type().is_dir() || metadata.file_type().is_symlink() {\n        bail!(\"Dream Skin theme path is not a safe directory\");\n    }\n    let config_path = directory.join(THEME_CONFIG_FILE);\n    let metadata = std::fs::symlink_metadata(&config_path)\n        .with_context(|| format!(\"Dream Skin theme config not found: {id}\"))?;\n    if !metadata.file_type().is_file()\n        || metadata.file_type().is_symlink()\n        || metadata.len() > THEME_CONFIG_LIMIT\n    {\n        bail!(\"invalid Dream Skin theme config\");\n    }\n    let config: DreamSkinThemeConfig = serde_json::from_slice(&std::fs::read(&config_path)?)?;\n    if config.id != id {\n        bail!(\"Dream Skin theme id does not match directory\");\n    }\n    let image = find_theme_image(&directory)\n        .ok_or_else(|| anyhow::anyhow!(\"Dream Skin theme must contain exactly one image\"))?;\n    let draft = DreamSkinThemeDraft {\n        config,","sourceCodeStart":359,"sourceCodeEnd":395,"githubUrl":"https://github.com/BigPizzaV3/CodexPlusPlus/blob/f2074595a281bc057525c748175c8eb9805b0673/crates/codex-plus-core/src/dream_skin_library.rs#L359-L395","documentation":"Safety guard in load_stored_dream_skin_theme: the theme directory under the state dir is not a regular directory (missing, a symlink, or another special file), so loading it could escape the themes root. The offending input is the on-disk directory entry for the given theme id.","triggerScenarios":"Thrown at crates/codex-plus-core/src/dream_skin_library.rs:377 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Remove the symlink/special file and reinstall the theme","Check the state dir for tampering or sync-tool artifacts","Refresh the theme from its source"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"f2074595a281bc057525c748175c8eb9805b0673","analyzedAt":"2026-08-23T12:52:24.489Z","contentChangedAt":"2026-08-23T12:52:24.489Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}