Skip to content

fix: fix path traversal detection for windows#1014

Merged
codejedi365 merged 1 commit intopython-semantic-release:test/validate-windows-implementationsfrom
codejedi365:fix/windows-path-traversal-prevention
Sep 1, 2024
Merged

fix: fix path traversal detection for windows#1014
codejedi365 merged 1 commit intopython-semantic-release:test/validate-windows-implementationsfrom
codejedi365:fix/windows-path-traversal-prevention

Conversation

@codejedi365
Copy link
Copy Markdown
Contributor

@codejedi365 codejedi365 commented Aug 31, 2024

Purpose

Rationale

@codejedi365 codejedi365 force-pushed the fix/windows-path-traversal-prevention branch 7 times, most recently from 89fdc55 to 95df869 Compare September 1, 2024 02:50
@codejedi365 codejedi365 changed the base branch from master to test/validate-windows-implementations September 1, 2024 08:27
The original implementation of the path traversal detection expected that `resolve()`
works the same on windows as it does with Linux/Mac. Windows requires the folder paths
to exist to be resolved and that is not the case when the `template_dir` is not being
used.

Resolves: python-semantic-release#994
@codejedi365 codejedi365 force-pushed the fix/windows-path-traversal-prevention branch from 95df869 to f422ea1 Compare September 1, 2024 08:29
@codejedi365 codejedi365 merged commit 7e0b850 into python-semantic-release:test/validate-windows-implementations Sep 1, 2024
@codejedi365 codejedi365 deleted the fix/windows-path-traversal-prevention branch September 1, 2024 08:50
codejedi365 added a commit that referenced this pull request Sep 1, 2024
…1014)

  The original implementation of the path traversal detection expected that `resolve()`
  works the same on windows as it does with Linux/Mac. Windows requires the folder paths
  to exist to be resolved and that is not the case when the `template_dir` is not being
  used.

  Resolves: #994
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Getting "Template directory must be inside of the repository directory." error when not specifying template_dir option.

1 participant