From 33f5ec9bbe45bc842afaf5522fd65017a14cfbbd Mon Sep 17 00:00:00 2001
From: Connor O'Connor <LoneAuios@gmail.com>
Date: Mon, 8 Dec 2025 03:32:12 -0500
Subject: [PATCH] Ensure fn is a string path

---
 src/lua-env-safe.lua | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/lua-env-safe.lua b/src/lua-env-safe.lua
index 2249c07..079bd8a 100644
--- a/src/lua-env-safe.lua
+++ b/src/lua-env-safe.lua
@@ -62,6 +62,9 @@ local disallowed_exts = tmap {
 -- Return: clean file path if allowed (or nil if disallowed),
 --         error string (or nil if allowed)
 local function safe_path(fn, readonly)
+  if type(fn) ~= 'string' then
+    return nil, 'Filename must be a string'
+  end
   fn = fn:gsub('\\', '/')
   fn = fn:gsub('^ +', '')
   fn = fn:gsub(' +$', '')