sftpgo/internal/ftpd
Nicola Murino 2f092d1289
fix: prevent path traversal via edge-level path normalization
Moved path sanitization (backslash conversion and path cleaning) to
the SFTP/FTP handlers before VFS routing and permission checks.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2026-03-07 12:03:59 +01:00
..
cryptfs_test.go fix connection limits 2024-10-26 21:18:19 +02:00
ftpd.go update deps 2025-12-27 11:48:06 +01:00
ftpd_test.go remove ftpserverlib fork 2025-09-21 14:21:53 +02:00
handler.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
internal_test.go ftpd: add tls version, cipher and KEX to login log 2025-12-24 12:52:31 +01:00
server.go ftpd: add tls version, cipher and KEX to login log 2025-12-24 12:52:31 +01:00
transfer.go upgrade golangci-lint to v2 2025-03-29 11:36:19 +01:00