Skip to content

Prevent restore path traversal#140

Open
mobasi-team wants to merge 1 commit into
Lazza:masterfrom
mobasi-team:fix/restore-path-containment
Open

Prevent restore path traversal#140
mobasi-team wants to merge 1 commit into
Lazza:masterfrom
mobasi-team:fix/restore-path-containment

Conversation

@mobasi-team
Copy link
Copy Markdown

Summary

  • Constrain restored paths to the selected output directory.
  • Skip unsafe absolute or parent-traversal paths before creating directories or files.
  • Add focused restore path tests.

Validation

  • PYTHONPATH=src python3 -m unittest discover -s tests

@mobasi-team mobasi-team marked this pull request as ready for review May 6, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant