[clang] [llvm] [llvm][clang] Sandbox filesystem reads (PR #165350)

[Jan Svoboda via llvm-commits]

================
@@ -1447,6 +1448,8 @@ class directory_iterator {
   explicit directory_iterator(const Twine &path, std::error_code &ec,
                               bool follow_symlinks = true)
       : FollowSymlinks(follow_symlinks) {
+    sandbox::violationIfEnabled();
----------------
jansvoboda11 wrote:

I did move it into the `detail::` implementations, mainly so that this (commonly-included) header can lose the include of `IOSandbox.h`.

https://github.com/llvm/llvm-project/pull/165350