sftpgo/internal/vfs
Nicola Murino 2f092d1289
fix: prevent path traversal via edge-level path normalization
Moved path sanitization (backslash conversion and path cleaning) to
the SFTP/FTP handlers before VFS routing and permission checks.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2026-03-07 12:03:59 +01:00
..
azblobfs.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
azblobfs_disabled.go remove obsoletes build constraints 2025-04-20 17:15:40 +02:00
cryptfs.go upgrade golangci-lint to v2 2025-03-29 11:36:19 +01:00
fileinfo.go EventManager: check file size for more events 2024-12-14 13:19:02 +01:00
filesystem.go remove some useless hooks 2024-09-27 15:52:51 +02:00
folder.go virtual folders: fix path placeholder check 2025-08-17 12:42:37 +02:00
gcsfs.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
gcsfs_disabled.go remove obsoletes build constraints 2025-04-20 17:15:40 +02:00
httpfs.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
osfs.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
s3fs.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
s3fs_disabled.go remove obsoletes build constraints 2025-04-20 17:15:40 +02:00
sftpfs.go fix: prevent path traversal via edge-level path normalization 2026-03-07 12:03:59 +01:00
statvfs_fallback.go remove obsoletes build constraints 2025-04-20 17:15:40 +02:00
statvfs_linux.go remove obsoletes build constraints 2025-04-20 17:15:40 +02:00
statvfs_unix.go remove obsoletes build constraints 2025-04-20 17:15:40 +02:00
sys_unix.go remove obsoletes build constraints 2025-04-20 17:15:40 +02:00
sys_windows.go remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
vfs.go cloud backends: update part size limits 2025-11-23 12:56:59 +01:00