chlinsandgithub-actions[bot] 0f86521735 Verify extracted item paths stay inside the backup directory ...

archive.GetItemFilePath/GetVersionedItemFilePath joined the group resource,
namespace and name into a path without checking the result against rootDir.
Those components can come from backup contents - the additional items a
RestoreItemAction returns are built from annotations on a backed up object -
so a component containing ".." resolved to an arbitrary file on the Velero
pod, which was then Stat'd, unmarshalled and restored as a Kubernetes object.

Both helpers now return an error when the joined path escapes rootDir, and all
callers handle it. rootDir is empty when building an entry path inside the
backup tarball, so "." is used as the containment base for that relative form.

Signed-off-by: chlins <chlins.zhang@gmail.com>

2026-07-31 06:02:43 +00:00

..

actions/csi

Replace github.com/pkg/errors by github.com/cockroachdb/errors

2026-06-10 15:55:57 +08:00

delete_item_action_handler_test.go

fix(delete): surface DeleteItemAction plugin errors from InvokeDeleteActions (#9993)

2026-07-13 14:51:54 -07:00

delete_item_action_handler.go

Verify extracted item paths stay inside the backup directory

2026-07-31 06:02:43 +00:00