Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Amend the check on IllegalAttachmentFileNameException #1216

Merged
merged 1 commit into from
May 4, 2024
Merged

Conversation

bhou2
Copy link
Contributor

@bhou2 bhou2 commented May 3, 2024

The purpose of checking the attachment filename is to avoid the filename to be . or .. or containing / or . So that users cannot put the attachments to any location via a hacking manner.

@bhou2 bhou2 requested review from Snetflix, zdong2 and andyn-nflx May 3, 2024 20:54
@bhou2 bhou2 force-pushed the dev-snapshot branch 5 times, most recently from 90c5e8e to 8b4de07 Compare May 3, 2024 22:04
Copy link

@Snetflix Snetflix left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fix looks good

@bhou2 bhou2 force-pushed the dev-snapshot branch 2 times, most recently from c2ab465 to 7101d2d Compare May 3, 2024 22:32
Copy link
Collaborator

@zdong2 zdong2 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@bhou2 bhou2 force-pushed the dev-snapshot branch 2 times, most recently from ac667e5 to f15d958 Compare May 3, 2024 23:27
@bhou2 bhou2 merged commit f53744c into master May 4, 2024
2 checks passed
natedanner pushed a commit to natedanner/Netflix__genie that referenced this pull request May 20, 2024
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants