Skip to content

Commit eff6e64

Browse files
authored
Update validate-packet-storage-paths.md
1 parent db91605 commit eff6e64

1 file changed

Lines changed: 1 addition & 13 deletions

File tree

.server-changes/validate-packet-storage-paths.md

Lines changed: 1 addition & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -3,16 +3,4 @@ area: webapp
33
type: fix
44
---
55

6-
Validate packet-relative storage paths before building object-store keys or presigned URLs. Rejects:
7-
8-
- an empty path
9-
- absolute paths (leading `/`)
10-
- backslashes (`\`)
11-
- empty path segments (e.g. `foo//bar`, leading or trailing `/`)
12-
- `.` path segments (e.g. `.`, `foo/./bar`)
13-
- `..` path segments (path traversal, e.g. `../file`, `foo/../bar`)
14-
- percent-encoded `.` / `..` segments (e.g. `%2e%2e`, `%2E%2E`, `%2e.`)
15-
16-
After segment checks, paths are normalized with the same URL pathname resolution used by `Aws4FetchClient`, and the full object-store key must remain under `packets/{projectRef}/{envSlug}/` after that normalization.
17-
18-
Applied in `uploadPacketToObjectStore`, `downloadPacketFromObjectStore`, and `generatePresignedRequest`. `Aws4FetchClient` uses shared `normalizeObjectStoreLogicalKeyPathname` for presign/PUT/GET URLs.
6+
Validate packet-relative storage paths before building object-store keys or presigned URLs.

0 commit comments

Comments
 (0)