Skip to content

fix: secure URL transcoding path traversal vulnerability in REST fallback #9146

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
danieljbruce wants to merge 22 commits into
base: main
Choose a base branch
from
+4,501 −3
Draft

fix: secure URL transcoding path traversal vulnerability in REST fallback #9146

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
23d2854
fix: secure URL transcoding path traversal vulnerability in REST fall…
google-labs-jules[bot] Aug 13, 2026
0e1f219
Apply suggestions from code review
danieljbruce Aug 13, 2026
ebd4779
Add a comment about changing the applyPattern signature
danieljbruce Aug 13, 2026
9759c50
Merge branch 'jules-transcoding-path-traversal-vuln-fix-6401005213542…
danieljbruce Aug 13, 2026
70c928d
Move the transcoding tests
danieljbruce Aug 13, 2026
ae95e73
Move the wildcards definition to later
danieljbruce Aug 13, 2026
08d13b0
Add another test with the exact pattern
danieljbruce Aug 13, 2026
94095ab
Adjust the code to fail when the user tries to traverse the path
danieljbruce Aug 13, 2026
d33163b
Revert "Adjust the code to fail when the user tries to traverse the p…
danieljbruce Aug 14, 2026
c898db0
Add comments to the last test
danieljbruce Aug 14, 2026
ea99463
Revert "Add comments to the last test"
danieljbruce Aug 14, 2026
ca4f260
Reapply "Adjust the code to fail when the user tries to traverse the …
danieljbruce Aug 14, 2026
af94646
Revert "Reapply "Adjust the code to fail when the user tries to trave…
danieljbruce Aug 14, 2026
89c693f
Reapply "Add comments to the last test"
danieljbruce Aug 14, 2026
3e46c57
Add another comment about percent encoding
danieljbruce Aug 14, 2026
fcc25cc
Add two tests for transversal
danieljbruce Aug 14, 2026
94131e5
Add comment for encoding using slashes
danieljbruce Aug 14, 2026
e600bb3
revert buildQueryStringComponents changes
danieljbruce Aug 14, 2026
db33841
Add strictEncodeURIComponent wrapper method
danieljbruce Aug 14, 2026
2336449
Add method comments
danieljbruce Aug 14, 2026
38506c6
Add more notes about character preservation
danieljbruce Aug 14, 2026
d875be0
Add the pnpm lock file
danieljbruce Aug 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading