WEFT_OS/crates
Marco Allegretti 8eace960c2 fix(file-portal): block dotdot path-traversal in is_allowed
Path::starts_with is component-aware but does not resolve .., so
/allowed/../etc/passwd would pass the check. Add normalize_path() that
lexically resolves . and .. components without touching the filesystem
so the check works on non-existent paths too. Add regression test.
2026-03-11 18:54:25 +01:00
..
weft-appd test(appd): verify session transitions to Stopped when WEFT_RUNTIME_BIN absent 2026-03-11 18:47:29 +01:00
weft-build-meta Initialize Rust workspace and repository metadata 2026-03-10 18:47:06 +01:00
weft-compositor feat(protocol): add wl_surface arg to create_window in weft-shell-unstable-v1 2026-03-11 14:33:17 +01:00
weft-file-portal fix(file-portal): block dotdot path-traversal in is_allowed 2026-03-11 18:54:25 +01:00
weft-ipc-types feat: weft-mount-helper -- setuid helper for EROFS+dm-verity mounts 2026-03-11 15:43:59 +01:00
weft-mount-helper feat: weft-mount-helper -- setuid helper for EROFS+dm-verity mounts 2026-03-11 15:43:59 +01:00
weft-pack test(pack): capability validation tests for check subcommand 2026-03-11 18:35:07 +01:00
weft-runtime feat(runtime): forward WEFT_FILE_PORTAL_SOCKET into WASI environment 2026-03-11 18:23:32 +01:00
weft-servo-shell feat(servo-shell): sync WebView set on appd reconnect via SyncSessions 2026-03-11 18:41:00 +01:00