ceos/adb-toolkit
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
0 releases 17 tags
  • v1.2.0 9d7eba705a

    v1.2.0

    Ghost released this 2026-07-06 07:51:40 +02:00 | 6 commits to main since this release

    Fix path injection in local file handler (CodeQL go/path-injection)

    ServeFile's built-in ".." rejection only covers r.URL.Path, not a path handed
    to it explicitly from a query param — validate p resolves to a real, regular
    file before serving.

    Downloads