Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add file access control for some kernel APIs #9722

Merged
merged 1 commit into from
Nov 22, 2023

Conversation

Zuoqiu-Yingyi
Copy link
Contributor

  • Please commit to the dev branch
  • For contributing new features, please supplement and improve the corresponding user guide documents

为部分文件 API 添加访问权限控制 (阻止对工作空间目录外文件的访问)
Add access controls to some file APIs (Block access to files outside the workspace directory)

  • /api/archive/zip
  • /api/archive/unzip
  • /api/file/getFile
  • /api/file/putFile
  • /api/file/removeFile
  • /api/file/renameFile
  • /api/file/readDir

TESTED

@88250 88250 added this to the 2.11.0 milestone Nov 22, 2023
@88250 88250 changed the title Add file access control for some APIs Add file access control for some kernel APIs Nov 22, 2023
@88250 88250 merged commit 4ca62ef into siyuan-note:dev Nov 22, 2023
2 checks passed
@Zuoqiu-Yingyi Zuoqiu-Yingyi deleted the secure/file-access-control branch November 22, 2023 14:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants