Sanitize relative paths server-side

This commit is contained in:
Andras Schmelczer 2025-01-04 16:16:54 +00:00
parent 0943681702
commit 6d5b183a3c
No known key found for this signature in database
GPG key ID: FC8F2C3D3D1A718C
6 changed files with 44 additions and 12 deletions

10
backend/Cargo.lock generated
View file

@ -1610,6 +1610,15 @@ dependencies = [
"winapi-util",
]
[[package]]
name = "sanitize-filename"
version = "0.6.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "bc984f4f9ceb736a7bb755c3e3bd17dc56370af2600c9780dcc48c66453da34d"
dependencies = [
"regex",
]
[[package]]
name = "schemars"
version = "0.8.21"
@ -2121,6 +2130,7 @@ dependencies = [
"log",
"rand",
"reconcile",
"sanitize-filename",
"schemars",
"serde",
"serde_yaml",