From 00028010586492d2009382bd689a97db8f7adc51 Mon Sep 17 00:00:00 2001
From: Yang Gao <6821729+criyle@users.noreply.github.com>
Date: Mon, 29 Dec 2025 17:56:25 -0500
Subject: [PATCH] judge: add message to inform sandbox upgrade (#1111)

---
 packages/hydrojudge/src/sandbox.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/packages/hydrojudge/src/sandbox.ts b/packages/hydrojudge/src/sandbox.ts
index 0466db632..9e802ffef 100644
--- a/packages/hydrojudge/src/sandbox.ts
+++ b/packages/hydrojudge/src/sandbox.ts
@@ -219,12 +219,14 @@ export async function versionCheck(reportWarn: (str: string) => void, reportErro
     let sandboxVersion: string;
     let sandboxCgroup: number;
     let sandboxCgroupControllers: string[] | null;
+    let fixSymlinkEscape: boolean;
     try {
         const version = await client.version();
         sandboxVersion = version.buildVersion.split('v')[1];
         const config = await client.config();
         sandboxCgroup = config.runnerConfig?.cgroupType || 0;
         sandboxCgroupControllers = config.runnerConfig?.cgroupControllers || null;
+        fixSymlinkEscape = config.fixSymlinkEscape ?? false;
     } catch (e) {
         if (e?.code === 'ECONNREFUSED') reportError('Failed to connect to sandbox, please check sandbox_host config and if your sandbox is running.');
         else reportError('Your sandbox version is tooooooo low! Please upgrade!');
@@ -242,6 +244,9 @@ export async function versionCheck(reportWarn: (str: string) => void, reportErro
             reportWarn('The memory cgroup controller is not enabled. This could result in inaccurate memory usage measurements.');
         }
     }
+    if (!fixSymlinkEscape) {
+        reportError('Your sandbox version is vulnerable to symlink escape issue, please upgrade!');
+    }
     return true;
 }