Skip to content

[INLONG-12143][Manager][Agent] Fix Agent path traversal via unvalidat…#12146

Open
spiritxishi wants to merge 5 commits into
apache:masterfrom
spiritxishi:INLONG-12143
Open

[INLONG-12143][Manager][Agent] Fix Agent path traversal via unvalidat…#12146
spiritxishi wants to merge 5 commits into
apache:masterfrom
spiritxishi:INLONG-12143

Conversation

@spiritxishi

Copy link
Copy Markdown

…ed file source path

(#12143)

Fixes #XYZ

Motivation

Modifications

Verifying this change

(Please pick either of the following options)

  • This change is a trivial rework/code cleanup without any test coverage.

  • This change is already covered by existing tests, such as:
    (please describe tests)

  • This change added tests and can be verified as follows:

    (example:)

    • Added integration tests for end-to-end deployment with large payloads (10MB)
    • Extended integration test for recovery after broker failure

Documentation

  • Does this pull request introduce a new feature? (yes / no)
  • If yes, how is the feature documented? (not applicable / docs / JavaDocs / not documented)
  • If a feature is not applicable for documentation, explain why?
  • If a feature is not documented yet in this PR, please create a follow-up issue for adding the documentation

…ed file source path

 (apache#12143)

[INLONG-12143][Manager][Agent] Fix Agent path traversal via unvalidated file source path
 (apache#12143)

[INLONG-12143][Manager][Agent] Fix Agent path traversal via unvalidated file source path
 (apache#12143)
@spiritxishi spiritxishi requested a review from fuweng11 June 22, 2026 11:18
fuweng11
fuweng11 previously approved these changes Jun 22, 2026
luchunliang
luchunliang previously approved these changes Jun 24, 2026
…h the previous version — it was "\\|" before, but now it's "|".
@spiritxishi spiritxishi dismissed stale reviews from luchunliang and fuweng11 via 0f6ca92 June 24, 2026 02:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants