Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix Path Escape Vulerability #304

Merged
merged 7 commits into from
Dec 18, 2023
Merged

Fix Path Escape Vulerability #304

merged 7 commits into from
Dec 18, 2023

Commits on Dec 17, 2023

  1. Ensure directory path delimiter for test destination directory

    @weichsel
    weichsel committed Dec 17, 2023
    Configuration menu
    Copy the full SHA
    83a5959 View commit details
    Browse the repository at this point in the history

  2. Rename test case

    @weichsel
    weichsel committed Dec 17, 2023
    Configuration menu
    Copy the full SHA
    95095e7 View commit details
    Browse the repository at this point in the history

  3. Add test case to test for directory delimiter-based traversal attacks

    @weichsel
    weichsel committed Dec 17, 2023
    Configuration menu
    Copy the full SHA
    de36275 View commit details
    Browse the repository at this point in the history

  4. Add path delimiter test method to test list

    @weichsel
    weichsel committed Dec 17, 2023
    Configuration menu
    Copy the full SHA
    1a284d0 View commit details
    Browse the repository at this point in the history

  5. Ensure that crafted entry paths can't be used for escapes in fopen

    @weichsel
    weichsel committed Dec 17, 2023
    Configuration menu
    Copy the full SHA
    f000f30 View commit details
    Browse the repository at this point in the history

  6. Add explanatory comment

    @weichsel
    weichsel committed Dec 17, 2023
    Configuration menu
    Copy the full SHA
    6413d1f View commit details
    Browse the repository at this point in the history

Commits on Dec 18, 2023

  1. Refine explanatory comment

    @weichsel
    weichsel committed Dec 18, 2023
    Configuration menu
    Copy the full SHA
    d99f75e View commit details
    Browse the repository at this point in the history