Skip to content

Z202: PATH_TRAVERSAL

Severity: error Penalty: 0.0 (Fatal Exit 2) Category: security Auto-fixable: No

Rationale

This security rule is triggered when a relative link or asset reference uses parent directory traversal sequences (../) to escape the root boundary of the designated documentation workspace (docs_dir).

How to Fix

Inspect the flagged location in the Markdown file and update the content or configuration:

Bad (Triggers Z202)

<!-- BAD: Traversal escaping the docs/ directory root -->
Download [Internal Secret](../../../secrets/keys.json).

Good (Resolves Z202)

<!-- GOOD: Target file resides inside designated docs/ workspace -->
Download [Public Keys](../assets/public-keys.json).

Configuration

# Workspace boundary enforced by docs_dir setting in .zenzic.toml
docs_dir = "docs"

Reference

See the Finding Codes Index for finding code details.