fix(vfs): V-08 — disallow tab control character in validate path safety

src/vfs.rs

@@ -691,7 +691,7 @@ pub fn validate_path_safety(path: &str) -> Result<(), FsError> {
         return Err(FsError::Forbidden);
     }
     for c in path.chars() {
-        if (c as u32) < 0x20 && c != '\t' {
+        if (c as u32) < 0x20 {
             return Err(FsError::Forbidden);
         }
     }
@@ -1398,6 +1398,7 @@ mod tests {
         assert!(validate_path_safety("/bad\x01file.txt").is_err());
         assert!(validate_path_safety("/bad\rfile.txt").is_err());
         assert!(validate_path_safety("/bad\nfile.txt").is_err());
+        assert!(validate_path_safety("/bad\tfile.txt").is_err());
 
         // 3. Gültiger Pfad
         assert!(validate_path_safety("/normal_file_123.txt").is_ok());