ai/danielmiessler.fabric
1
0
Fork 0
mirror of https://github.com/danielmiessler/fabric.git synced 2026-09-10 07:36:44 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

chore: incoming 2123 changelog entry

Browse source
This commit is contained in:
Kayvan Sylvan 2026-07-28 08:11:17 -07:00
parent 54347b5cf5
commit e36a231f3f
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
cmd/generate_changelog/incoming/2123.txt Normal file
View file

@ -0,0 +1,3 @@
### PR [#2123](https://github.com/danielmiessler/Fabric/pull/2123) by [OdinKral](https://github.com/OdinKral): fix: block path traversal in pattern name lookup
- **Security Fix:** Blocked path traversal attacks in pattern name lookup (closes #2094) — pattern names containing `..` could previously escape the patterns directory and read arbitrary files via `filepath.Join`; a guard has been added at the top of `getFromDB`, an i18n key `pattern_invalid_name` has been added to all 11 locale files, and test cases now cover all common traversal variants.