flux2

main

rfc-0008-implemented

dependabot/go_modules/github.com/go-git/go-git/v5-5.13.0

dependabot/go_modules/tests/integration/golang.org/x/net-0.33.0

dependabot/github_actions/ci-c96ae57a0b

dependabot/go_modules/tests/integration/github.com/golang-jwt/jwt/v4-4.5.1

release/v2.4.x

remove-notation-validation

release/v2.3.x

dependabot/go_modules/github.com/hashicorp/go-retryablehttp-0.7.7

dependabot/go_modules/github.com/Azure/azure-sdk-for-go/sdk/azidentity-1.6.0

rfc-flux-bootstrap-oci

release/v2.2.x

RFC

fix-commit-log

flux-audit

release/v2.1.x

context-ns

ksm-dashboard

rfc-passwordless-git-auth

release/v2.0.x

rfc-gating

release/v0.27.4

rfc-0003

rfc-0002

rfc-0001

prompt-for-tokens

encrypt-init-cmd

v2.4.0

v2.3.0

v2.2.3

v2.2.2

v2.2.1

v2.2.0

v2.1.2

v2.1.1

v2.1.0

v2.0.1

v2.0.0

v2.0.0-rc.5

v2.0.0-rc.4

v2.0.0-rc.3

v2.0.0-rc.2

v2.0.0-rc.1

v0.41.2

v0.40.0

v0.39.0

v0.38.2

v0.38.1

v0.38.0

v0.37.0

v0.36.0

v0.35.0

v0.34.0

v0.33.0

v0.32.0

v0.31.3

v0.31.2

v0.31.1

v0.31.0

v0.30.1

v0.28.2

v0.27.2

v0.27.1

v0.27.0

v0.26.3

v0.26.2

v0.26.1

v0.26.0

v0.25.3

v0.0.1

v0.0.1-alpha.1

v0.0.1-beta.1

v0.0.1-beta.2

v0.0.1-beta.3

v0.0.1-beta.4

v0.0.10

v0.0.11

v0.0.12

v0.0.13

v0.0.14

v0.0.15

v0.0.16

v0.0.17

v0.0.18

v0.0.19

v0.0.2

v0.0.20

v0.0.21

v0.0.22

v0.0.23

v0.0.24

v0.0.25

v0.0.26

v0.0.27

v0.0.28

v0.0.3

v0.0.4

v0.0.5

v0.0.6

v0.0.7

v0.0.8

v0.0.9

v0.1.0

v0.1.1

v0.1.2

v0.1.3

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.1.8

v0.10.0

v0.11.0

v0.12.0

v0.12.1

v0.12.2

v0.12.3

v0.13.0

v0.13.1

v0.13.2

v0.13.3

v0.13.4

v0.14.0

v0.14.1

v0.14.2

v0.15.0

v0.15.1

v0.15.2

v0.15.3

v0.16.0

v0.16.1

v0.16.2

v0.17.0

v0.17.1

v0.17.2

v0.18.0

v0.18.1

v0.18.2

v0.18.3

v0.19.0

v0.19.1

v0.2.0

v0.2.1

v0.2.2

v0.2.3

v0.2.4

v0.2.5

v0.2.6

v0.20.0

v0.20.1

v0.21.0

v0.21.1

v0.22.0

v0.22.1

v0.23.0

v0.24.0

v0.24.1

v0.25.0

v0.25.1

v0.25.2

v0.27.3

v0.27.4

v0.28.0

v0.28.1

v0.28.3

v0.28.4

v0.28.5

v0.29.0

v0.29.1

v0.29.2

v0.29.3

v0.29.4

v0.29.5

v0.3.0

v0.30.0

v0.30.2

v0.31.4

v0.31.5

v0.38.3

v0.4.0

v0.4.1

v0.4.2

v0.4.3

v0.40.1

v0.40.2

v0.41.0

v0.41.1

v0.5.0

v0.5.1

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.5.6

v0.5.7

v0.5.8

v0.5.9

v0.6.0

v0.6.1

v0.6.2

v0.6.3

v0.7.0

v0.7.1

v0.7.2

v0.7.3

v0.7.4

v0.7.5

v0.7.6

v0.7.7

v0.8.0

v0.8.1

v0.8.2

v0.9.0

v0.9.1

Commit Graph

Author	SHA1	Message	Date
Hidde Beydals	5ea4e814f5	Add safe guards for relative paths This commit adds multiple safe guards for relative paths, ensuring they never traverse outside the working directory. The `SafeRelativePath` flag calculates the safe relative path based on a relative base dir, which results in a flattened path. The write methods of `manifestgen` make use of the `SecureJoin` as well, to ensure writes are never outside of the given directory when used as a lib outside of the CLI. Signed-off-by: Hidde Beydals <hello@hidde.co>	4 years ago

Author

SHA1

Message

Date

Hidde Beydals

5ea4e814f5

Add safe guards for relative paths

This commit adds multiple safe guards for relative paths, ensuring they
never traverse outside the working directory.

The `SafeRelativePath` flag calculates the safe relative path based on a
relative base dir, which results in a flattened path.

The write methods of `manifestgen` make use of the `SecureJoin` as well,
to ensure writes are never outside of the given directory when used as
a lib outside of the CLI.

Signed-off-by: Hidde Beydals <hello@hidde.co>

1 Commits (b1484f2f24b26d787afca09d7ef21aadbe11b699)