diff options
| author | Stefan Boberg <[email protected]> | 2026-03-21 20:56:52 +0100 |
|---|---|---|
| committer | Stefan Boberg <[email protected]> | 2026-03-21 20:56:52 +0100 |
| commit | 40aa894401912a84a8d4f48de83f37a1b6c3801a (patch) | |
| tree | ec0efd6c0656bd44e01402de61464546ad3cf6d7 /src/zenhttp/servers/httpplugin.cpp | |
| parent | Fix ParsePackageMessage calls to allow local references where expected (diff) | |
| download | zen-sb/compute-auth.tar.xz zen-sb/compute-auth.zip | |
Add ILocalRefPolicy to validate local file reference paths against data rootsb/compute-auth
Restrict local-ref file paths to the server's data directories to prevent
a local process from reading arbitrary files via crafted local references.
The policy uses weakly_canonical + prefix matching (fail-closed when no
policy is configured). Handle-based refs bypass the policy since they
rely on OS handle security.
Diffstat (limited to 'src/zenhttp/servers/httpplugin.cpp')
0 files changed, 0 insertions, 0 deletions