433cc8f3

Author: Michael Lynch <git@mtlynch.io>

Committer: Michael Lynch <mtlynch@noreply.codeberg.org>

Reject unsafe media paths (#286)

Reject absolute paths, current-directory subfolders, and parent-directory traversal in media path values so generated media paths stay within the expected backend-relative root.

Reviewed-on: https://codeberg.org/mtlynch/little-moments/pulls/286

Codeberg

Tree Dependencies

Suite timing

	Time to Start	Worker time	Duration	Time to finish
Config	1s	3s	3s	4s
Eval	5s	22s	22s	28s
Build	10s	8m59s	4m57s	5m07s
Deploy	5m08s	4m55s	4m55s	10m04s
Suite	1s	14m20s	10m02s	10m04s

Timeline

Agent Instructions

This page shows suite timings.

This page is also available in machine-friendly formats. Request one with the Accept header:

curl --netrc -H 'Accept: application/json' https://nix-ci.com/cb:mtlynch:little-moments/master/433cc8f37ee8fcb3ab2767b67726907cbe82886d/timing
curl --netrc -H 'Accept: text/markdown' https://nix-ci.com/cb:mtlynch:little-moments/master/433cc8f37ee8fcb3ab2767b67726907cbe82886d/timing

For more instructions, fetch https://nix-ci.com/instructions .