Fix file management and permissions issues #23

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

cyclotruc merged 5 commits into coderamp-labs:main from nollium:main

Dec 12, 2024

Contributor

nollium commented Dec 12, 2024 •

edited

Loading

Hello, this PR fixes some bugs that might lead to security-related issues:

Run the docker installation using an unprivileged user
Add some recursion and size limits to prevent DOS
Fix some bugs related to symbolic links
Add a missing dependency to requirements.txt

anon and others added 5 commits

December 12, 2024 16:56


          Add missing requirement

ef241e7


          Prevent following symlinks outside of cloned repository

a203a92


          Launch as non root user in Dockerfile

6e4ecb4


          Prevent circular links

f568a95


          Add depth and size limits to avoid DOS

6a0b5d8

cyclotruc approved these changes

View reviewed changes

Member

cyclotruc left a comment •

edited

Loading

Reviewed and tested locally, invaluable PR thank you

cyclotruc merged commit 9996a06 into coderamp-labs:main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet