github/kata-containers
1
0
Fork 2
mirror of https://github.com/kata-containers/kata-containers.git synced 2026-05-17 13:04:23 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #12991 from gkurz/opa-fix-traversal-regex

Browse Source 
genpolicy: Fix matching of `..` in paths
This commit is contained in:
Fabiano Fidêncio
2026-05-06 11:59:00 +02:00
committed by GitHub
parent bdaa65e29d 56eda1686c
commit 75bde1483e
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/tools/genpolicy/rules.rego
View File

@@ -1520,7 +1520,7 @@ strip_cap_prefix(s) := result if {
}
check_directory_traversal(i_path) if {
not regex.match("(^|/)..($|/)", i_path)
not regex.match("(^|/)\\.\\.($|/)", i_path)
}
allow_sandbox_storages(i_storages) if {