diff options
| author | Stefan Boberg <[email protected]> | 2026-03-21 18:25:15 +0100 |
|---|---|---|
| committer | Stefan Boberg <[email protected]> | 2026-03-21 18:25:15 +0100 |
| commit | b25d9c00e2bbd01bbdf8feb530c35a1488dee2c6 (patch) | |
| tree | 44dcd31beeecea3dc466ecf39322876c33554f87 /src/zencore/compactbinaryjson.cpp | |
| parent | Merge branch 'main' into sb/compute-auth (diff) | |
| download | zen-b25d9c00e2bbd01bbdf8feb530c35a1488dee2c6.tar.xz zen-b25d9c00e2bbd01bbdf8feb530c35a1488dee2c6.zip | |
Fix ParsePackageMessage calls to allow local references where expected
The path traversal hardening missed two call sites: the project store
RPC handler and cache test client-side response parsing. Pass
kAllowLocalReferences when the request originates from localhost or
when the test client requested local file references.
Diffstat (limited to 'src/zencore/compactbinaryjson.cpp')
0 files changed, 0 insertions, 0 deletions