mirror of
https://github.com/bmad-code-org/BMAD-METHOD.git
synced 2026-09-19 01:36:27 +08:00
The Windows branch of ABS_PATH_LEAK used `\\\\`, which in a regex literal is two backslashes, so it only matched the escaped `C:\\Users` form and let a plain `C:\Users\...` or `C:/Users/...` through. Match a drive letter of either case followed by one separator, with a word boundary so URL schemes like https:// stay unflagged. Fixes #2487