#dev 2022-09-19

2022-09-19 UTC

barnaby yep, anything my code does with paths has the incoming data sanitized, the final path resolved, and then checked to ensure that it’s inside a hard-coded path prefix