f447a4611a
Previous security patches addressed path traversal vulnerabilities for string and Buffer inputs, but ignored Uint8Array inputs. This commit fixes the existing logic to account for the latter. The previous implementation would silently ignore unexpected inputs, whereas this commit introduces an explicit assertion to prevent that unsafe behavior. PR-URL: https://github.com/nodejs-private/node-private/pull/456 Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> CVE-ID: CVE-2023-39332 |
||
|---|---|---|
| .. | ||
| cp | ||
| read | ||
| dir.js | ||
| glob.js | ||
| promises.js | ||
| recursive_watch.js | ||
| rimraf.js | ||
| streams.js | ||
| sync_write_stream.js | ||
| utils.js | ||
| watchers.js | ||