Re: [I] Path traversal in attestable file path construction (tooling-trusted-releases)

["alitheg (via GitHub)" <gi...@apache.org>]

alitheg commented on issue #719:
URL: https://github.com/apache/tooling-trusted-releases/issues/719#issuecomment-4022423550

   The new datatypes validate project_name and version_name (and support release_name) as they come in from a URL. I haven't added revision but we could do so easily. Personally I'd say we can close this and open a new lower priority ticket for revision number (since I don't think we use it in those URLs very often?).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For additional commands, e-mail: dev-help@tooling.apache.org