Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prevent directory traversion with static files #2495

Merged
merged 15 commits into from Jul 28, 2022
Merged

Prevent directory traversion with static files #2495

merged 15 commits into from Jul 28, 2022
+70 −17

Commits on Jul 10, 2022

  1. Check unquoted URLs for directory traversing

    @prryplatypus
    prryplatypus committed Jul 10, 2022
    Copy the full SHA
    c94d399 View commit details
    Browse the repository at this point in the history

  2. Only check for traversal in __file_uri__

    @prryplatypus
    prryplatypus committed Jul 10, 2022
    Copy the full SHA
    34a964b View commit details
    Browse the repository at this point in the history

  3. Actually use the correct variable

    @prryplatypus
    prryplatypus committed Jul 10, 2022
    Copy the full SHA
    bb9da4f View commit details
    Browse the repository at this point in the history

Commits on Jul 18, 2022

  1. Better performing traversal check

    @prryplatypus
    prryplatypus committed Jul 18, 2022
    Copy the full SHA
    95aceb2 View commit details
    Browse the repository at this point in the history

Commits on Jul 26, 2022

  1. Add tests

    @ahopkins
    ahopkins committed Jul 26, 2022
    Copy the full SHA
    73b1a1c View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' of github.com:sanic-org/sanic into prry/2478-path… 

    …-traversal
    @ahopkins
    ahopkins committed Jul 26, 2022
    Copy the full SHA
    d504ecb View commit details
    Browse the repository at this point in the history

  3. Fix test case

    @ChihweiLHBird
    ChihweiLHBird committed Jul 26, 2022
    Copy the full SHA
    7ac9868 View commit details
    Browse the repository at this point in the history

Commits on Jul 27, 2022

  1. Fix test on win32

    @ChihweiLHBird
    ChihweiLHBird committed Jul 27, 2022
    Copy the full SHA
    6ed4e63 View commit details
    Browse the repository at this point in the history

  2. Fix test on win32 (2)

    @ChihweiLHBird
    ChihweiLHBird committed Jul 27, 2022
    Copy the full SHA
    11617f1 View commit details
    Browse the repository at this point in the history

  3. Generated static files cleanup

    @ChihweiLHBird
    ChihweiLHBird committed Jul 27, 2022
    Copy the full SHA
    297980e View commit details
    Browse the repository at this point in the history

  4. Optimized logic

    @ChihweiLHBird
    ChihweiLHBird committed Jul 27, 2022
    Copy the full SHA
    9e463ee View commit details
    Browse the repository at this point in the history

  5. Prohibit backslash in static file path for win32

    @ChihweiLHBird
    ChihweiLHBird committed Jul 27, 2022
    Copy the full SHA
    76ec4d3 View commit details
    Browse the repository at this point in the history

  6. Add skip reason

    @ChihweiLHBird
    ChihweiLHBird committed Jul 27, 2022
    Copy the full SHA
    448e759 View commit details
    Browse the repository at this point in the history

  7. Make it to be one loop for performance optimization

    @ChihweiLHBird
    ChihweiLHBird committed Jul 27, 2022
    Copy the full SHA
    9c8ca36 View commit details
    Browse the repository at this point in the history

Commits on Jul 28, 2022

  1. Performance optimization with benchmark results

    @ChihweiLHBird
    ChihweiLHBird committed Jul 28, 2022
    Copy the full SHA
    b57dca3 View commit details
    Browse the repository at this point in the history