sftpgo/internal/sftpd
Nicola Murino 2f092d1289
fix: prevent path traversal via edge-level path normalization
Moved path sanitization (backslash conversion and path cleaning) to
the SFTP/FTP handlers before VFS routing and permission checks.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2026-03-07 12:03:59 +01:00
..
cryptfs_test.go remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
handler.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
httpfs_test.go remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
internal_test.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
lister.go remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
scp.go remove rsync support 2025-09-28 18:15:15 +02:00
server.go sftpd: add support for OpenPubkey SSH 2025-11-19 09:16:56 +01:00
sftpd.go remove rsync support 2025-09-28 18:15:15 +02:00
sftpd_test.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
ssh_cmd.go remove rsync support 2025-09-28 18:15:15 +02:00
transfer.go remove rsync support 2025-09-28 18:15:15 +02:00