433cc8f3

Author: Michael Lynch <git@mtlynch.io>

Committer: Michael Lynch <mtlynch@noreply.codeberg.org>

Reject unsafe media paths (#286)

Reject absolute paths, current-directory subfolders, and parent-directory traversal in media path values so generated media paths stay within the expected backend-relative root.

Reviewed-on: https://codeberg.org/mtlynch/little-moments/pulls/286

Suite timing

Time to Start Worker time Duration Time to finish Idle
Config 1s 3s 3s 4s 1s
Eval 5s 22s 22s 28s 0s
Build 10s 8m59s 4m57s 5m07s 1m30s
Deploy 5m08s 4m55s 4m55s 10m04s 0s
Suite 1s 14m20s 10m02s 10m04s 1m34s

Timeline

0s1m4m5m6m7m8m9m10m