dapr
/
components-contrib
mirror of https://github.com/dapr/components-contrib.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Local storage binding: disable access to other system folders for security reasons (#2947) 

Signed-off-by: ItalyPaleAle <43508+ItalyPaleAle@users.noreply.github.com>
This commit is contained in:
Alessandro (Ale) Segala 2023-07-12 13:50:03 -07:00 committed by GitHub
parent 836e373b38
commit 760948a533
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
bindings/localstorage/localstorage.go
View File

@ -40,6 +40,9 @@ const (
// List of root paths that are disallowed
var disallowedRootPaths = []string{
filepath.Clean("/proc"),
filepath.Clean("/sys"),
filepath.Clean("/boot"),
// See: https://github.com/dapr/components-contrib/issues/2444
filepath.Clean("/var/run/secrets"),
}