[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2506: Magic Folder: enforce that downloaded files are only written below the magic folder directory

[Tahoe-LAFS]

#2506: Magic Folder: enforce that downloaded files are only written below the
magic folder directory
-------------------------------------+-------------------------------------
     Reporter:  daira                |      Owner:  daira
         Type:  defect               |     Status:  new
     Priority:  major                |  Milestone:  undecided
    Component:  code-frontend-       |    Version:  n/a
  magic-folder                       |   Keywords:  otf-magic-folder-
   Resolution:                       |  objective4 test-needed security
Launchpad Bug:                       |  unicode path blocks-merge
-------------------------------------+-------------------------------------

Comment (by daira):

 I believe this is now fixed on the [https://github.com/tahoe-lafs/tahoe-
 lafs/commits/2506.enforce-paths.2] branch. It passes existing tests, but
 still lacks a specific test for the security bug.

 I have also rebased to master: [https://github.com/tahoe-lafs/tahoe-
 lafs/commits/2506.enforce-paths.3].

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2506#comment:12>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage