You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@tooling.apache.org by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/09/08 14:25:52 UTC
[I] Error: Path cannot contain directory traversal (tooling-trusted-releases)
sebbASF opened a new issue, #1579:
URL: https://github.com/apache/tooling-trusted-releases/issues/1579
Navigate to https://releases.apache.org/vote/asyncband/0.7.2
Click on Browse Files, i.e. https://releases.apache.org/download/path/asyncband/0.7.2
```
Path cannot contain directory traversal
An error occurred while processing your request. This has been logged and will be addressed.
Status code: 500
Request ID: 4dd50fb9-a838-4fd9-b38b-094520210222
Technical details
Traceback (most recent call last):
File "/opt/atr/.venv/lib/python3.14/site-packages/quart/app.py", line 1501, in full_dispatch_request
result = await self.dispatch_request(request_context)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/opt/atr/.venv/lib/python3.14/site-packages/quart/app.py", line 1598, in dispatch_request
return await self.ensure_async(handler)(**request_.view_args) # type: ignore[return-value]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/opt/atr/atr/blueprints/get.py", line 71, in wrapper
response = await func(enhanced_session, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/opt/atr/atr/get/download.py", line 114, in path_empty
return await _download_or_list(project_key, version_key, None)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/opt/atr/atr/get/download.py", line 232, in _download_or_list
full_path = paths.release_directory(release) / validated_path
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~
File "/opt/atr/atr/models/safe.py", line 126, in __truediv__
validated = other if isinstance(other, SafeType) else RelPath(str(other))
~~~~~~~^^^^^^^^^^^^
File "/opt/atr/atr/models/safe.py", line 62, in __init__
self._additional_validations(value)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^
File "/opt/atr/atr/models/safe.py", line 270, in _additional_validations
raise ValueError("Path cannot contain directory traversal")
ValueError: Path cannot contain directory traversal
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Error: Path cannot contain directory traversal (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp closed issue #1579: Error: Path cannot contain directory traversal
URL: https://github.com/apache/tooling-trusted-releases/issues/1579
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Error: Path cannot contain directory traversal (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp commented on issue #1579:
URL: https://github.com/apache/tooling-trusted-releases/issues/1579#issuecomment-5590985664
Resolved by 0dd4d7c8d834346b31af7a874c98ea3c26d6801d. Thank you for the report.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org