Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: cyphar/filepath-securejoin
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.2.4
Choose a base ref
...
head repository: cyphar/filepath-securejoin
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.2.5
Choose a head ref
  • 5 commits
  • 3 files changed
  • 1 contributor

Commits on Sep 6, 2023

  1. VERSION: back to development

    Signed-off-by: Aleksa Sarai <[email protected]>
    cyphar committed Sep 6, 2023
    Configuration menu
    Copy the full SHA
    b69b737 View commit details
    Browse the repository at this point in the history

Commits on May 3, 2024

  1. gha: update Go versions

    Signed-off-by: Aleksa Sarai <[email protected]>
    cyphar committed May 3, 2024
    Configuration menu
    Copy the full SHA
    75cdbea View commit details
    Browse the repository at this point in the history
  2. join: don't allow .. and . in working path during resolution

    The previous implementation would allow lexical components like ".." to
    be present in the intermediate path and wait for them to be cleaned at
    the very end.
    
    While this is technically okay to do (since we expand symlinks and the
    components are definitely purely lexical when we add them to the working
    path), it makes more sense to update the working path to equal the
    generated path (which is cleaned). This also reduces the possibility of
    a subtle bug here causing issues.
    
    Signed-off-by: Aleksa Sarai <[email protected]>
    cyphar committed May 3, 2024
    Configuration menu
    Copy the full SHA
    e9be397 View commit details
    Browse the repository at this point in the history
  3. join: fix ELOOP error path

    When returning an error, we should use the original path in the error
    message. Previously we would append the unresolved remaining path to the
    root, which is not a real path.
    
    Fixes: 322b993 ("Ditch pkg/errors, use native error (un)wrapping")
    Signed-off-by: Aleksa Sarai <[email protected]>
    cyphar committed May 3, 2024
    Configuration menu
    Copy the full SHA
    87bc53a View commit details
    Browse the repository at this point in the history
  4. VERSION: release v0.2.5

    Signed-off-by: Aleksa Sarai <[email protected]>
    cyphar committed May 3, 2024
    Configuration menu
    Copy the full SHA
    d861a11 View commit details
    Browse the repository at this point in the history
Loading