Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prevent arbitrary file writes with malicious resource names. #3484

Merged
merged 15 commits into from
Jan 2, 2024
Merged

Prevent arbitrary file writes with malicious resource names. #3484

merged 15 commits into from
Jan 2, 2024

Commits on Dec 30, 2023

  1. refactor: rename sanitize function

    @iBotPeaches
    iBotPeaches committed Dec 30, 2023
    Configuration menu
    Copy the full SHA
    bf8c49f View commit details
    Browse the repository at this point in the history

  2. fix: expose getDir

    @iBotPeaches
    iBotPeaches committed Dec 30, 2023
    Configuration menu
    Copy the full SHA
    ba6cf33 View commit details
    Browse the repository at this point in the history

Commits on Dec 31, 2023

  1. fix: safe handling of untrusted resource names 

     - fixes: GHSA-2hqv-2xv4-5h5w
    @iBotPeaches
    iBotPeaches committed Dec 31, 2023
    Configuration menu
    Copy the full SHA
    226b16a View commit details
    Browse the repository at this point in the history

  2. test: sample file for GHSA-2hqv-2xv4-5h5w

    @iBotPeaches
    iBotPeaches committed Dec 31, 2023
    Configuration menu
    Copy the full SHA
    5777852 View commit details
    Browse the repository at this point in the history

  3. refactor: avoid detection of absolute files for resource check

    @iBotPeaches
    iBotPeaches committed Dec 31, 2023
    Configuration menu
    Copy the full SHA
    a809a1f View commit details
    Browse the repository at this point in the history

  4. chore: enable info mode on gradle

    @iBotPeaches
    iBotPeaches committed Dec 31, 2023
    Configuration menu
    Copy the full SHA
    7f56fb7 View commit details
    Browse the repository at this point in the history

  5. test: skip test on windows

    @iBotPeaches
    iBotPeaches committed Dec 31, 2023
    Configuration menu
    Copy the full SHA
    dc1e1fe View commit details
    Browse the repository at this point in the history

  6. chore: debug windows handling

    @iBotPeaches
    iBotPeaches committed Dec 31, 2023
    Configuration menu
    Copy the full SHA
    09ea55a View commit details
    Browse the repository at this point in the history

  7. fix: normalize entry with file separators

    @iBotPeaches
    iBotPeaches committed Dec 31, 2023
    Configuration menu
    Copy the full SHA
    f190827 View commit details
    Browse the repository at this point in the history

  8. fix: normalize filepath after cleansing

    @iBotPeaches
    iBotPeaches committed Dec 31, 2023
    Configuration menu
    Copy the full SHA
    1208964 View commit details
    Browse the repository at this point in the history

  9. chore: Android paths are not OS specific

    @iBotPeaches
    iBotPeaches committed Dec 31, 2023
    Configuration menu
    Copy the full SHA
    a94732b View commit details
    Browse the repository at this point in the history

  10. refactor: use java.nio for path traversal checking

    @iBotPeaches
    iBotPeaches committed Dec 31, 2023
    Configuration menu
    Copy the full SHA
    7b33766 View commit details
    Browse the repository at this point in the history