Kunal Sachdev authored Feb 14, 2023 and Ted Bowman committed Feb 14, 2023

Issue #3331310 by kunal.sachdev, tedbow, Wim Leers: Exclude unknown paths in project base: only allow vendor + web root + whatever drupal/core-composer-scaffold allows