Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: backport #8979, re-encode url to prevent fs.allow bypass (fixes #8498) #8990

Merged
merged 1 commit into from Jul 8, 2022

Conversation

sapphi-red
Copy link
Member

Description

backport #8979
fixes #8498

Additional context


What is the purpose of this pull request?

  • Bug fix
  • New Feature
  • Documentation update
  • Other

Before submitting the PR, please make sure you do the following

  • Read the Contributing Guidelines.
  • Read the Pull Request Guidelines and follow the Commit Convention.
  • Check that there isn't already a PR that solves the problem the same way to avoid creating a duplicate.
  • Provide a description in this PR that addresses what the PR is solving, or reference the issue that it solves (e.g. fixes #123).
  • Ideally, include relevant tests that fail without this PR but pass with it.

@sapphi-red sapphi-red added bug p5-urgent Fix build-breaking bugs affecting most users, should be released ASAP (priority) security labels Jul 8, 2022
@netlify
Copy link

netlify bot commented Jul 8, 2022

Deploy Preview for vite-docs-v2 ready!

Name Link
🔨 Latest commit 0770fd0
🔍 Latest deploy log https://app.netlify.com/sites/vite-docs-v2/deploys/62c7e5450292700009e119af
😎 Deploy Preview https://deploy-preview-8990--vite-docs-v2.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

@patak-dev
Copy link
Member

Thanks for taking care of this @sapphi-red!

@patak-dev patak-dev merged commit adb61c5 into vitejs:v2 Jul 8, 2022
@sapphi-red sapphi-red deleted the fix/fs-bypass branch July 8, 2022 11:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
p5-urgent Fix build-breaking bugs affecting most users, should be released ASAP (priority) security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants