danielmiessler.fabric/internal/plugins/db
OdinKral 1e650266ab fix: block path traversal in pattern name lookup (closes #2094)
Pattern names containing ".." could be used to escape the patterns
directory and read arbitrary files via filepath.Join. Guard added at
the top of getFromDB; i18n key pattern_invalid_name added to all
11 locale files; test cases cover all common traversal variants.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-07-28 08:08:03 -07:00
..
fsdb fix: block path traversal in pattern name lookup (closes #2094) 2026-07-28 08:08:03 -07:00
api.go refactor: restructure project to align with standard Go layout 2025-07-08 22:47:17 -07:00