We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent ca80026 commit 54f2d21Copy full SHA for 54f2d21
internal/builders/nodejs/build.sh
@@ -30,6 +30,7 @@ echo "Directory '${UNTRUSTED_DIRECTORY}' resolved to '${untrusted_realpath}'"
30
github_workspace_realpath=$(realpath -e "${GITHUB_WORKSPACE}")
31
echo "GitHub workspace '${GITHUB_WORKSPACE}' resolved to '${github_workspace_realpath}'"
32
33
+# TODO(#1893): Consolidate directory traversal checks
34
echo "Checking directory '${untrusted_realpath}' is a sub-directory of '${github_workspace_realpath}'"
35
if [[ "${untrusted_realpath}" != "${github_workspace_realpath}" ]] && [[ ${untrusted_realpath} != ${github_workspace_realpath}/* ]]; then
36
echo "${UNTRUSTED_DIRECTORY} not a sub-directory of ${GITHUB_WORKSPACE}"
0 commit comments