You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Make more test repos with traversal-attempting blob names
The approach in make_traverse_literal_slases.sh works about equally
well for any top level file with strange characters. Before, it was
only generating such repositores where the filename has slashes,
causing traversal on all platforms. This has is generate two more
repositories, with backslashes instead of slashes. That script's
name is accordingly updated to make_traverse_literal_separators.sh.
Note that while such names with backslashes may be blocked on
multiple systems under various circumstances, they will only
perform traversal on Windows.
0 commit comments