0a0bfdda

Author: Michael Lynch <git@mtlynch.io>

Committer: Michael Lynch <mtlynch@noreply.codeberg.org>

Reject unsafe relative media paths (#285)

Reject absolute paths and parent-directory escapes in RelativePath values so media lookups stay within the expected backend-relative root.

Reviewed-on: https://codeberg.org/mtlynch/little-moments/pulls/285

Suite timing

Time to Start Worker time Duration Time to finish
Config 2s 10s 10s 12s
Eval 9s 27s 27s 37s
Build 16s 7m38s 3m59s 4m16s
Deploy 4m17s 4m53s 4m53s 9m11s
Suite 2s 13m10s 9m08s 9m11s

Timeline

0s1m2m3m4m5m6m7m8m9m