Skip to content

fix(runtime): secure symlink-safe file writes - #451

Open
phall1 wants to merge 1 commit into
vercel-labs:mainfrom
phall1:upstream/symlink-safe-writes
Open

phall1 wants to merge 1 commit into
vercel-labs:mainfrom
phall1:upstream/symlink-safe-writes

Conversation

@phall1

@phall1 phall1 commented Sep 19, 2026

Copy link
Copy Markdown

File writes could follow a symlink out of the app root via a parent directory. Open and inspect the destination so writes stay inside the sandbox.

@vercel

vercel Bot commented Sep 19, 2026

Copy link
Copy Markdown

Someone is attempting to deploy a commit to the Vercel Labs Team on Vercel.

A member of the Team first needs to authorize it.

@phall1
phall1 force-pushed the upstream/symlink-safe-writes branch from e910e48 to f1b5a0c Compare September 20, 2026 00:01
@phall1
phall1 marked this pull request as ready for review September 20, 2026 05:19

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant