Update pkg/distribution/internal/bundle/unpack.go

ilopezluna · Copilot · web-flow · commit 3e7213e45ba7 · 2025-10-01T17:33:17.000+02:00
Co-authored-by: Copilot &lt;175728472+Copilot@users.noreply.github.com&gt;
diff --git a/pkg/distribution/internal/bundle/unpack.go b/pkg/distribution/internal/bundle/unpack.go
@@ -210,7 +210,7 @@ func unpackConfigArchive(bundle *Bundle, mdl types.Model) error {
 }
 
 // validatePathWithinDirectory checks if targetPath is within baseDir to prevent directory traversal attacks.
-// It uses filepath.IsLocal() which is available in Go 1.20+ and provides robust security against
+// It uses filepath.IsLocal() to provide robust security against
 // various directory traversal attempts including edge cases like empty paths, ".", "..", symbolic links, etc.
 func validatePathWithinDirectory(baseDir, targetPath string) error {
 	// Get absolute path of base directory

Original file line number	Diff line number	Diff line change
`@@ -210,7 +210,7 @@ func unpackConfigArchive(bundle *Bundle, mdl types.Model) error {`
`210`	`210`	`}`
`211`	`211`
`212`	`212`	`// validatePathWithinDirectory checks if targetPath is within baseDir to prevent directory traversal attacks.`
`213`		`-// It uses filepath.IsLocal() which is available in Go 1.20+ and provides robust security against`
	`213`	`+// It uses filepath.IsLocal() to provide robust security against`
`214`	`214`	`// various directory traversal attempts including edge cases like empty paths, ".", "..", symbolic links, etc.`
`215`	`215`	`func validatePathWithinDirectory(baseDir, targetPath string) error {`
`216`	`216`	`// Get absolute path of base directory`