Skip to content

Prevent path traversal in tool config names #2910

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jmthomas merged 3 commits into from
Mar 5, 2026

Use allowlist for tool config name validation instead of denylist

e6efccb
Select commit
Loading
Failed to load commit list.
Merged

Prevent path traversal in tool config names #2910

Use allowlist for tool config name validation instead of denylist
e6efccb
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded Mar 4, 2026 in 0s

78.21% (-0.08%) compared to f9d0650

View this Pull Request on Codecov

78.21% (-0.08%) compared to f9d0650

Details

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.21%. Comparing base (f9d0650) to head (e6efccb).

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #2910      +/-   ##
==========================================
- Coverage   78.28%   78.21%   -0.08%     
==========================================
  Files         673      673              
  Lines       55204    55229      +25     
  Branches      728      728              
==========================================
- Hits        43216    43196      -20     
- Misses      11910    11955      +45     
  Partials       78       78

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.
View more details on Codecov