AIKIDO-2026-10830

TL;DR

The snippets extension resolves include paths against base_path and rejects paths outside that directory when restrict_base_path is enabled. A regression used a raw string prefix test on absolute paths, so resolved paths under sibling directories whose names extend the same prefix still passed the check and could be read from Markdown. The fix restores a separator-aware boundary so the resolved file must lie under the intended base directory. The issue matters when less-trusted Markdown is rendered in a build that should only expose files under a configured documentation root.