projectdiscovery-nuclei

mirror of https://github.com/projectdiscovery/nuclei synced 2026-06-08 16:50:47 +00:00

Files

T

History

Dwi Siswanto 20cbf0bd73 refactor: use path-aware filesystem containment checks (#7420 )

* feat(filepath): add IsPathWithinAnyDirectory func

Signed-off-by: Dwi Siswanto <git@dw1.io>

* refactor: use path-aware filesystem containment checks

Several filesystem trust boundaries relied on
lexical prefix checks to decide whether a path
fell under an allowed directory. That let sibling
paths be treated as if they were children of
trusted directories.

Replace those checks with canonical path
containment checks for helper payload loading,
template archive extraction, custom template
metadata, template path classification, and
headless screenshot output validation.

Signed-off-by: Dwi Siswanto <git@dw1.io>

* adding more tests

* fixing tests

* adding test

---------

Signed-off-by: Dwi Siswanto <git@dw1.io>
Co-authored-by: Mzack9999 <mzack9999@protonmail.com>

2026-06-04 21:03:51 +05:30

aws

refactor: use slices.Contains to simplify code

2025-05-27 17:16:26 +08:00

config

refactor: use path-aware filesystem containment checks (#7420 )

2026-06-04 21:03:51 +05:30

disk

refactor: use path-aware filesystem containment checks (#7420 )

2026-06-04 21:03:51 +05:30

index

finalizing