Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

the program/@source attribute must not contain absolute path #3811

Closed
yegor256 opened this issue Jan 13, 2025 · 0 comments · Fixed by #3883
Closed

the program/@source attribute must not contain absolute path #3811

yegor256 opened this issue Jan 13, 2025 · 0 comments · Fixed by #3883

Comments

@yegor256
Copy link
Member

Currently, the program/@source attribute contains absolute path of the .eo file parsed. This is a potential security leakage, since this data exposes internal information about the environment. Instead, let's put there relative path of the file, starting from the current directory, where parser was running.

maxonfjvipon added a commit to maxonfjvipon/eo that referenced this issue Feb 3, 2025
maxonfjvipon added a commit to maxonfjvipon/eo that referenced this issue Feb 4, 2025
maxonfjvipon added a commit to maxonfjvipon/eo that referenced this issue Feb 4, 2025
maxonfjvipon added a commit to maxonfjvipon/eo that referenced this issue Feb 4, 2025
github-merge-queue bot pushed a commit that referenced this issue Feb 4, 2025
…path

bug(#3811): relative `/program/@source` path
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant