From 708da24d916c1c9e1ac9a5b8c18dde8a629b05f6 Mon Sep 17 00:00:00 2001
From: harald <harald@pansi.eu>
Date: Sat, 19 Sep 2026 09:22:46 +0200
Subject: [PATCH] =?UTF-8?q?fix(vfs):=20V-08=20=E2=80=94=20disallow=20tab?=
 =?UTF-8?q?=20control=20character=20in=20validate=20path=20safety?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/vfs.rs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/vfs.rs b/src/vfs.rs
index 10f6e5c..0bee7b8 100644
--- a/src/vfs.rs
+++ b/src/vfs.rs
@@ -691,7 +691,7 @@ pub fn validate_path_safety(path: &str) -> Result<(), FsError> {
         return Err(FsError::Forbidden);
     }
     for c in path.chars() {
-        if (c as u32) < 0x20 && c != '\t' {
+        if (c as u32) < 0x20 {
             return Err(FsError::Forbidden);
         }
     }
@@ -1398,6 +1398,7 @@ mod tests {
         assert!(validate_path_safety("/bad\x01file.txt").is_err());
         assert!(validate_path_safety("/bad\rfile.txt").is_err());
         assert!(validate_path_safety("/bad\nfile.txt").is_err());
+        assert!(validate_path_safety("/bad\tfile.txt").is_err());
 
         // 3. Gültiger Pfad
         assert!(validate_path_safety("/normal_file_123.txt").is_ok());