popiart-node-canvas

749 Commits

30 Branches

0 Tags

1.2 GiB

Tree: 7460a90090

Commit Graph

Author	SHA1	Message	Date
shrimbly	5fd7ff9e57	fix(security): add path traversal validation to workflow routes - Create validateWorkflowPath() utility to prevent path traversal attacks - Reject non-absolute paths, traversal sequences, and dangerous system directories - Apply validation to workflow and workflow-images POST/GET handlers - Fix workflow-images ENOENT-specific catch block to match workflow route pattern - Fix workflow mkdir failure status code from 400 to 500 (server error) - Add comprehensive path traversal tests for both routes - All malicious path attempts now return 400 Bad Request	5 months ago
Marquis Boyd	75ecc2c733	Checkpoint: project setup - save creates project-named folder - verified	5 months ago

Author

SHA1

Message

Date

shrimbly

5fd7ff9e57

fix(security): add path traversal validation to workflow routes

- Create validateWorkflowPath() utility to prevent path traversal attacks
- Reject non-absolute paths, traversal sequences, and dangerous system directories
- Apply validation to workflow and workflow-images POST/GET handlers
- Fix workflow-images ENOENT-specific catch block to match workflow route pattern
- Fix workflow mkdir failure status code from 400 to 500 (server error)
- Add comprehensive path traversal tests for both routes
- All malicious path attempts now return 400 Bad Request

5 months ago

Marquis Boyd

75ecc2c733

Checkpoint: project setup - save creates project-named folder - verified

5 months ago

2 Commits (7460a900907e8537ddcef716438b8929ffaf219f)