fix(github): reject path-traversal values in interpolated URL segments - #7262

Closed

waleedlatif1 wants to merge 6 commits into

fix/github-path-safety

Commits on Aug 29, 2026

fix(github): reject path-traversal values in interpolated URL segments
waleedlatif1
committed
d36e6c8
fix(github): stop safeUrlPath trimming real filename whitespace
waleedlatif1
committed
64273cf
fix(github): permit a whitespace-only path component
waleedlatif1
committed
515b951
fix(github): refuse a padded identifier on state-changing requests
waleedlatif1
committed
d2c74d7
docs(github): record why the strict guards stop at writes
waleedlatif1
committed
0c5108e
fix(github): reject a backslash in safeEncodedUrlPathSegment
waleedlatif1
committed
ccbf0d2