Skip to content

Confine JavaScript importer paths to allowed roots - #237

Merged
LukeTowers merged 5 commits into
developfrom
wip/ghsa-2223-js-importer-lfi
Aug 6, 2026
Merged

Confine JavaScript importer paths to allowed roots#237
LukeTowers merged 5 commits into
developfrom
wip/ghsa-2223-js-importer-lfi

Throw on required JS includes outside allowed import roots

4ae7d40
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar