You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by GitBox <gi...@apache.org> on 2026/05/01 16:16:53 UTC

[GH] (ofbiz-framework/trunk): Workflow run "gradle in /. - Update #1344468084" failed!

The GitHub Actions job "gradle in /. - Update #1344468084" on ofbiz-framework.git/trunk has failed.
Run started by GitHub user dependabot[bot] (triggered by dependabot[bot]).

Head commit for run:
b3eadf1cff2e3431e57c1f2002333fb22e0a458a / Jacopo Cappellato <ja...@gmail.com>
Fixed: Improve file path validation to work with mounted directories

File.getCanonicalPath() resolves all symlinks in a path. OS-level mount points (Docker bind mounts, EFS) appear as symlinks. When a subdirectory like runtime/ is mounted, a file's canonical path resolves to the mount target (e.g. /mnt/efs/data/file.pdf), which no longer shares a prefix with the canonical path of ofbiz.home (/opt/ofbiz)

Report URL: https://github.com/apache/ofbiz-framework/actions/runs/25222033588

With regards,
GitHub Actions via GitBox