Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(fs): check resolved path against root #224

Merged
merged 5 commits into from
Dec 16, 2020
Merged

Conversation

matt-forster
Copy link
Contributor

@matt-forster matt-forster commented Dec 15, 2020

This should prevent paths from being resolved above the root.

Should affect all commands that utilize the FS functions.

Fixes #167

@matt-forster matt-forster self-assigned this Dec 15, 2020
@matt-forster matt-forster added the bug A defect or bug that affects the original indended use of the application label Dec 15, 2020
This should prevent paths from being resolved above the root.

Should affect all commands that utilize the FS functions.

Fixes #167
@matt-forster matt-forster marked this pull request as ready for review December 16, 2020 00:49
Otherwise join will normalize
@matt-forster matt-forster merged commit 457b859 into master Dec 16, 2020
@matt-forster matt-forster deleted the fix-root-escape branch December 16, 2020 17:19
@botovance
Copy link
Contributor

🎉 This PR is included in version 4.4.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug A defect or bug that affects the original indended use of the application released security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Windows: User can escape from root directory
4 participants