mirror of https://github.com/garrytan/gstack.git
39702a90ae
- Add validateOutputPath() to ensure screenshot, pdf, and responsive commands only write to /tmp or current working directory - Add validateReadPath() to prevent eval command from reading files outside allowed directories or using path traversal (..) - Validates both absolute paths and relative paths with .. sequences Security impact: Prevents arbitrary file write (screenshot/pdf) and arbitrary file read (eval) attacks via path traversal. Fixes: #13 |
||
|---|---|---|
| .. | ||
| browser-manager.ts | ||
| buffers.ts | ||
| cli.ts | ||
| meta-commands.ts | ||
| read-commands.ts | ||
| server.ts | ||
| snapshot.ts | ||
| write-commands.ts | ||