Skip to content

Commit

Permalink
chore(spec): remove note about non-escaping paths/globs
Browse files Browse the repository at this point in the history
This safety guard is rather impossible to implement correctly, because even if
I implemented this for fs actions like `cp`, `mv` and `rm`, nothing'd stop one
from simply using `run` action to escape target directory and doing evil stuff.
  • Loading branch information
norskeld committed Mar 10, 2024
1 parent bf1a473 commit 722137b
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion spec.kdl
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,6 @@ actions {
// Note:
//
// - Paths don't expand, i.e. ~ won't expand to the home directory and env vars won't work either.
// - Paths don't escape the target directory, so delete "../../../**/*" won't work.
suite "files" {
cp from=".template/*.toml" to="."
rm ".template/*.toml"
Expand Down

0 comments on commit 722137b

Please sign in to comment.