Skip to content

Conversation

@Ritish134
Copy link

What this does

Adds validation for the --mappings file path in the dfc CLI:

  • Rejects empty or . paths
  • Prevents directory traversal (e.g., ../../secret.yaml)
  • Requires .yaml or .yml extension

Why

This prevents accidental misuse and improves security by ensuring users provide valid and safe YAML files for mappings.

Signed-off-by: Ritish Srivastava <121374890+Ritish134@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant