Permalink
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
...
- 5 commits
- 5 files changed
- 1 contributor
Commits on Jan 13, 2025
-
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
-
merge #45 into cyphar/filepath-securejoin:main
Aleksa Sarai (2): VERSION: back to development VERSION: release v0.4.0 LGTMs: cyphar
Commits on Jan 24, 2025
-
join: loosen cleanliness requirements for SecureJoin root
It turns out that some users do provide unclean paths like "foo/bar/" and as a result the new behaviour in commit bc750ad ("join: return an error if root is unclean path") was far too aggressive and lead to regressions. The more gentle solution is to only error out if the path contains a ".." component (which is the only component type we are really worried about here because it's the only one that can turn a safe root-joined-path into an unsafe one due to how symlinks are resolved on Linux). Fixes: bc750ad ("join: return an error if root is unclean path") Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
-
merge #47 into cyphar/filepath-securejoin:main
Aleksa Sarai (1): join: loosen cleanliness requirements for SecureJoin root LGTMs: kolyshkin cyphar
Commits on Jan 28, 2025
-
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v0.4.0...v0.4.1