FolderSchemeHandlerFactory path boundary check can expose files outside the configured root folder #5255

Closed

Assignees

Labels

Milestone

opened

on May 29, 2026

Ensure that only files within the root path can be accessed via web requests.

Metadata

Assignees

amaitland

Labels

Type

Fields

No fields configured for Bug.

Projects

No projects

Milestone

148.0.xNo due date

Relationships

None yet

Development

No branches or pull requests