Skip to content

[v3-2-test] Prevent path traversal via AIRFLOW_CLI_ENVIRONMENT in airflowctl (#64618)#65096

Merged
bugraoz93 merged 1 commit intov3-2-testfrom
backport-eae5f75-v3-2-test
Apr 12, 2026
Merged

[v3-2-test] Prevent path traversal via AIRFLOW_CLI_ENVIRONMENT in airflowctl (#64618)#65096
bugraoz93 merged 1 commit intov3-2-testfrom
backport-eae5f75-v3-2-test

Conversation

@github-actions
Copy link
Copy Markdown

  • replace by target.is_relative_to(base)

  • Update airflow-ctl/tests/airflow_ctl/api/test_client.py

Co-authored-by: Copilot 175728472+Copilot@users.noreply.github.com

  • fix(cli): add path traversal protection and improve exception handling

(cherry picked from commit eae5f75)

Co-authored-by: rjgoyln 151457491+rjgoyln@users.noreply.github.com
Co-authored-by: Copilot 175728472+Copilot@users.noreply.github.com

…flowctl (#64618)

* replace by target.is_relative_to(base)

* Update airflow-ctl/tests/airflow_ctl/api/test_client.py

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* fix(cli): add path traversal protection and improve exception handling

---------
(cherry picked from commit eae5f75)

Co-authored-by: rjgoyln <151457491+rjgoyln@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@bugraoz93 bugraoz93 marked this pull request as ready for review April 12, 2026 16:43
@bugraoz93 bugraoz93 merged commit 8e55051 into v3-2-test Apr 12, 2026
4 checks passed
@bugraoz93 bugraoz93 deleted the backport-eae5f75-v3-2-test branch April 12, 2026 16:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants