433cc8f3

Reject unsafe media paths (#286)

Reject absolute paths, current-directory subfolders, and parent-directory traversal in media path values so generated media paths stay within the expected backend-relative root.

Reviewed-on: https://codeberg.org/mtlynch/little-moments/pulls/286

Agent Instructions

Each run corresponds to one flake attribute. Click a run for its logs and status.

Example: https://nix-ci.com/cb:mtlynch:little-moments/master/433cc8f37ee8fcb3ab2767b67726907cbe82886d/df75b0c4-b7db-47dc-a91d-14a048fd1de7

Wait for suite to complete:

curl --netrc -N https://nix-ci.com/cb:mtlynch:little-moments/master/433cc8f37ee8fcb3ab2767b67726907cbe82886d/wait

This page is also available in machine-friendly formats. Request one with the Accept header:

• curl --netrc -H 'Accept: application/json' https://nix-ci.com/cb:mtlynch:little-moments/master/433cc8f37ee8fcb3ab2767b67726907cbe82886d
• curl --netrc -H 'Accept: text/markdown' https://nix-ci.com/cb:mtlynch:little-moments/master/433cc8f37ee8fcb3ab2767b67726907cbe82886d

For more instructions, fetch https://nix-ci.com/instructions .