{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":90438444,"defaultBranch":"main","name":"filepath-securejoin","ownerLogin":"cyphar","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2017-05-06T04:59:53.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/2888411?v=4","public":true,"private":false,"isOrgOwned":false},"refInfo":{"name":"","listCacheKey":"v0:1714720987.0","currentOid":""},"activityList":{"items":[{"before":"9e94c83af5f59208278e66a5aa9ce15788311d3f","after":"b04d326baf62c503ee6dce2a56ded480b087a1a1","ref":"refs/heads/main","pushedAt":"2024-05-03T11:59:28.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"*: update copyright lines\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"*: update copyright lines"}},{"before":"87bc53ae3c3a15c0579db3064b2001b68d26a6b1","after":"9e94c83af5f59208278e66a5aa9ce15788311d3f","ref":"refs/heads/main","pushedAt":"2024-05-03T07:23:02.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"VERSION: back to development\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"VERSION: back to development"}},{"before":"e9be3976a1163d89de43dd47288e47fa753dac82","after":"87bc53ae3c3a15c0579db3064b2001b68d26a6b1","ref":"refs/heads/main","pushedAt":"2024-05-03T07:20:33.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"join: fix ELOOP error path\n\nWhen returning an error, we should use the original path in the error\nmessage. Previously we would append the unresolved remaining path to the\nroot, which is not a real path.\n\nFixes: 322b9931ad83 (\"Ditch pkg/errors, use native error (un)wrapping\")\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"join: fix ELOOP error path"}},{"before":"75cdbeac87f3839554771daa91bc93a2e596ee60","after":"e9be3976a1163d89de43dd47288e47fa753dac82","ref":"refs/heads/main","pushedAt":"2024-05-03T07:20:30.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"join: don't allow .. and . in working path during resolution\n\nThe previous implementation would allow lexical components like \"..\" to\nbe present in the intermediate path and wait for them to be cleaned at\nthe very end.\n\nWhile this is technically okay to do (since we expand symlinks and the\ncomponents are definitely purely lexical when we add them to the working\npath), it makes more sense to update the working path to equal the\ngenerated path (which is cleaned). This also reduces the possibility of\na subtle bug here causing issues.\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"join: don't allow .. and . in working path during resolution"}},{"before":"bfc7ed2172e8cb672ab8387c14f9acaab11c8586","after":"75cdbeac87f3839554771daa91bc93a2e596ee60","ref":"refs/heads/main","pushedAt":"2024-05-03T07:20:28.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"gha: update Go versions\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"gha: update Go versions"}},{"before":"91b5fd80c6ffca61701ae5944c16d78285b3108c","after":"bfc7ed2172e8cb672ab8387c14f9acaab11c8586","ref":"refs/heads/main","pushedAt":"2024-05-03T07:14:21.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"join: fix ELOOP error path\n\nWhen returning an error, we should use the original path in the error\nmessage. Previously we would append the unresolved remaining path to the\nroot, which is not a real path.\n\nFixes: 322b9931ad83 (\"Ditch pkg/errors, use native error (un)wrapping\")\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"join: fix ELOOP error path"}},{"before":"b7f80c58c2401575415f64079625c895e7b135aa","after":"91b5fd80c6ffca61701ae5944c16d78285b3108c","ref":"refs/heads/main","pushedAt":"2024-05-03T07:14:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"join: don't allow .. and . in working path during resolution\n\nThe previous implementation would allow lexical components like \"..\" to\nbe present in the intermediate path and wait for them to be cleaned at\nthe very end.\n\nWhile this is technically okay to do (since we expand symlinks and the\ncomponents are definitely purely lexical when we add them to the working\npath), it makes more sense to update the working path to equal the\ngenerated path (which is cleaned). This also reduces the possibility of\na subtle bug here causing issues.\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"join: don't allow .. and . in working path during resolution"}},{"before":"d559916cc20e9cf72e5003f891482e836111e306","after":"b7f80c58c2401575415f64079625c895e7b135aa","ref":"refs/heads/main","pushedAt":"2024-05-03T07:14:16.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"gha: update Go versions\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"gha: update Go versions"}},{"before":"872014b221d83ad2caa8f3ace9a380324e772d2e","after":"d559916cc20e9cf72e5003f891482e836111e306","ref":"refs/heads/main","pushedAt":"2024-05-03T07:07:48.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"join: fix ELOOP error path\n\nWhen returning an error, we should use the original path in the error\nmessage. Previously we would append the unresolved remaining path to the\nroot, which is not a real path.\n\nFixes: 322b9931ad83 (\"Ditch pkg/errors, use native error (un)wrapping\")\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"join: fix ELOOP error path"}},{"before":"b69b737a2dcadcbf888a1f32389acdb26b73a2b5","after":"872014b221d83ad2caa8f3ace9a380324e772d2e","ref":"refs/heads/main","pushedAt":"2024-05-03T07:02:09.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"join: don't allow .. and . in working path during resolution\n\nThe previous implementation would allow lexical components like \"..\" to\nbe present in the intermediate path and wait for them to be cleaned at\nthe very end.\n\nWhile this is technically okay to do (since we expand symlinks and the\ncomponents are definitely purely lexical when we add them to the working\npath), it makes more sense to update the working path to equal the\ngenerated path (which is cleaned). This also reduces the possibility of\na subtle bug here causing issues.\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"join: don't allow .. and . in working path during resolution"}},{"before":"68943415e950190ee33bddfa205e42186da87802","after":"b69b737a2dcadcbf888a1f32389acdb26b73a2b5","ref":"refs/heads/main","pushedAt":"2023-09-06T05:07:00.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"VERSION: back to development\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"VERSION: back to development"}},{"before":"05b64230154f962d518a3a44fcfd7b9b63bab031","after":"68943415e950190ee33bddfa205e42186da87802","ref":"refs/heads/main","pushedAt":"2023-09-06T05:01:19.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"merge #9 into main\n\nPaulo Gomes (1):\n  Fix support for Windows\n\nLGTMs: cyphar","shortMessageHtmlLink":"merge <a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1872297961\" data-permission-text=\"Title is private\" data-url=\"https://github.com/cyphar/filepath-securejoin/issues/9\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/cyphar/filepath-securejoin/pull/9/hovercard\" href=\"https://github.com/cyphar/filepath-securejoin/pull/9\">#9</a> into main"}},{"before":"706014f0ec303abbbb92a5a82d1b1d9a6a0209d0","after":"05b64230154f962d518a3a44fcfd7b9b63bab031","ref":"refs/heads/main","pushedAt":"2023-08-22T15:29:11.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"ci: switch to GHA\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"ci: switch to GHA"}},{"before":"5aa57414e3ff8a673d5ec5b525f194e03282c02d","after":"706014f0ec303abbbb92a5a82d1b1d9a6a0209d0","ref":"refs/heads/main","pushedAt":"2023-08-22T14:55:19.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"ci: switch to GHA\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"ci: switch to GHA"}},{"before":"3e27967dc5e41d131dda7de1165e40aa6b898e18","after":"5aa57414e3ff8a673d5ec5b525f194e03282c02d","ref":"refs/heads/main","pushedAt":"2023-08-22T14:53:13.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"ci: switch to GHA\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"ci: switch to GHA"}},{"before":"90fab0fc1b555de517a00f4ddac9a2aa708ff515","after":"3e27967dc5e41d131dda7de1165e40aa6b898e18","ref":"refs/heads/main","pushedAt":"2023-08-22T14:51:57.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"ci: switch to GHA\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"ci: switch to GHA"}},{"before":"3eb99ed49f64badd5c9b72ff5facda0a0f33e95e","after":"90fab0fc1b555de517a00f4ddac9a2aa708ff515","ref":"refs/heads/main","pushedAt":"2023-08-22T14:50:54.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"ci: switch to GHA\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"ci: switch to GHA"}},{"before":"64536a8a66ae59588c981e2199f1dcf410508e07","after":"3eb99ed49f64badd5c9b72ff5facda0a0f33e95e","ref":"refs/heads/main","pushedAt":"2023-08-22T14:49:51.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"ci: switch to GHA\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"ci: switch to GHA"}},{"before":"64536a8a66ae59588c981e2199f1dcf410508e07","after":null,"ref":"refs/heads/master","pushedAt":"2023-08-22T14:49:21.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"}},{"before":null,"after":"64536a8a66ae59588c981e2199f1dcf410508e07","ref":"refs/heads/main","pushedAt":"2023-08-22T14:49:20.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"cyphar","name":"Aleksa Sarai","path":"/cyphar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2888411?s=80&v=4"},"commit":{"message":"VERSION: back to development\n\nSigned-off-by: Aleksa Sarai <cyphar@cyphar.com>","shortMessageHtmlLink":"VERSION: back to development"}}],"hasNextPage":false,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEQLVmZQA","startCursor":null,"endCursor":null}},"title":"Activity · cyphar/filepath-securejoin"}