Skip to content

#567 [security][tools] Bash の書き込み先の glob・brace を展開前の文字列で判定するため、中の symlink を通ってワークスペース外へ書き込める(#509 の調査で発見) - #573

Merged
Kewton merged 4 commits into
developfrom
feature/issue-567-security-tools-bash-glob-brace-symlink-509
Oct 1, 2026

fix(tools): refuse brackets mixed with brace/comma/backslash, saturat…

4586dcf
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 warning and 1 notice
acceptance
succeeded Oct 1, 2026 in 6m 2s