1
0
forked from sneak/secret
secret/internal
user 8eb25b98fd fix: block .. path components in secret names and validate in GetSecretObject
- isValidSecretName() now rejects names with '..' path components (e.g. foo/../bar)
- GetSecretObject() now calls isValidSecretName() before building paths
- Added test cases for mid-path traversal patterns
2026-02-15 14:17:33 -08:00
..
cli fix: remove redundant longterm.age encryption in Init command 2026-02-08 12:05:09 -08:00
secret Merge branch 'main' into fix/issue-7 2026-02-09 02:19:56 +01:00
vault fix: block .. path components in secret names and validate in GetSecretObject 2026-02-15 14:17:33 -08:00