Repository navigation

fix: prevent path traversal via task_id in cleaning task log/delete e… - #508

Merged

Dallas98 merged 9 commits into

mainfrom

security/path-cross

Jun 17, 2026

Commits on Jun 17, 2026

fix: prevent path traversal via task_id in cleaning task log/delete endpoints
MoeexT
committed
fa71c86
fix: prevent path traversal via filename in chunk upload (arbitrary file write)
MoeexT
committed
d16bf0b
fix: prevent path traversal in GlusterFS reader/writer via subPath and destPath injection
MoeexT
committed
4105654
fix: prevent path traversal via prefix/fileName in upload preUpload
MoeexT
committed
0e51ab7
fix: resolve CodeQL "uncontrolled data in path" warnings
MoeexT
committed
d8c0005
fix: use CodeQL-sanitized path validation patterns
MoeexT
committed
23e7799
fix: use CodeQL-recognized sanitizer function for task_id path construction
MoeexT
committed
fce6886
fix: sanitize retry_count to resolve remaining CodeQL path warnings
MoeexT
committed
867097f
fix: use module-level sanitizer functions in cleaning_task_service
MoeexT
committed
92b66b0