Skip to content

blob/fileblob: Prevent escaping bucket root#3669

Merged
vangent merged 1 commit into
google:masterfrom
vangent:escape
Mar 9, 2026
Merged

blob/fileblob: Prevent escaping bucket root#3669
vangent merged 1 commit into
google:masterfrom
vangent:escape

Conversation

@vangent

@vangent vangent commented Mar 9, 2026

Copy link
Copy Markdown
Contributor

Fixes #3667.

@vangent vangent merged commit f0c27aa into google:master Mar 9, 2026
5 checks passed
@vangent vangent deleted the escape branch March 9, 2026 21:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

blob/fileblob: path traversal via ".." key escapes bucket root (arbitrary file read/write/delete)

1 participant