user 8eb25b98fd fix: block .. path components in secret names and validate in GetSecretObject ...

- isValidSecretName() now rejects names with '..' path components (e.g. foo/../bar)
- GetSecretObject() now calls isValidSecretName() before building paths
- Added test cases for mid-path traversal patterns

2026-02-15 14:17:33 -08:00

..

integration_test.go

Switch from relative paths to bare names in pointer files

2025-12-23 13:43:10 +07:00

integration_version_test.go

uses protected memory buffers now for all secrets in ram

2025-07-15 08:32:33 +02:00

management.go

Switch from relative paths to bare names in pointer files

2025-12-23 13:43:10 +07:00

metadata_test.go

fix: resolve exported type stuttering issues (revive)

2025-06-20 12:47:06 -07:00

metadata.go

fix: resolve all revive linter issues

2025-07-15 06:06:48 +02:00

path_traversal_test.go

fix: block .. path components in secret names and validate in GetSecretObject

2026-02-15 14:17:33 -08:00

secrets_version_test.go

uses protected memory buffers now for all secrets in ram

2025-07-15 08:32:33 +02:00

secrets.go

fix: block .. path components in secret names and validate in GetSecretObject

2026-02-15 14:17:33 -08:00

unlockers.go

Switch from relative paths to bare names in pointer files

2025-12-23 13:43:10 +07:00

vault_error_test.go

Replace symlinks with plain files containing relative paths

2025-12-23 11:53:28 +07:00

vault_test.go

fix: NumSecrets() now correctly counts secrets by checking for current file

2026-02-08 12:04:15 -08:00

vault.go

fix: NumSecrets() now correctly counts secrets by checking for current file

2026-02-08 12:04:15 -08:00