Skip to content

Add configurable allowed directory for applications with 'any' option#401

Merged
kriszyp merged 1 commit intov5.0from
directory-containment
Apr 24, 2026
Merged

Add configurable allowed directory for applications with 'any' option#401
kriszyp merged 1 commit intov5.0from
directory-containment

Conversation

@kriszyp
Copy link
Copy Markdown
Member

@kriszyp kriszyp commented Apr 23, 2026

This commit introduces the APPLICATIONS_ALLOWEDDIRECTORY configuration parameter to control application file access restrictions. The default value is set to 'app', maintaining current behavior, while 'any' allows unrestricted directory access by clearing the allowedPath check.

This commit introduces the `APPLICATIONS_ALLOWEDDIRECTORY` configuration parameter to control application file access restrictions. The default value is set to 'app', maintaining current behavior, while 'any' allows unrestricted directory access by clearing the allowedPath check.
@kriszyp kriszyp changed the base branch from main to v5.0 April 23, 2026 20:31
@kriszyp kriszyp marked this pull request as ready for review April 23, 2026 20:38
@kriszyp kriszyp requested a review from a team as a code owner April 23, 2026 20:38
Copy link
Copy Markdown
Contributor

@cb1kenobi cb1kenobi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Clever solution, I like it!

@kriszyp kriszyp requested a review from ldt1996 April 24, 2026 17:06
@ldt1996
Copy link
Copy Markdown
Contributor

ldt1996 commented Apr 24, 2026

Looks great!

@kriszyp kriszyp merged commit e27794c into v5.0 Apr 24, 2026
20 of 22 checks passed
@kriszyp kriszyp deleted the directory-containment branch April 24, 2026 17:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants