git-pages
[mirror] Scalable static site server for Git forges (like GitHub Pages)
Star
Fork
Watch

[security] Forbid backslashes from occurring in project names. v0.9.1

This addresses an authorization bypass (which could occur only on Windows). A more principled way to do this would be to use `os.Root.OpenRoot` and scope the actual filesystem operations per-domain. However, I prototyped this and it was complicated enough that it wasn't clear whether this would not introduce new issues. V12-Ref: F-77209

Author
Date Commit Parent ad8359c8
+1 -1
1 changed file
Unified Split
+1 -1
1 changed file