hutiefang76 commented on PR #13389: URL: https://github.com/apache/gravitino/pull/13389#issuecomment-5828120216
Closing as superseded by #13425. I checked current main: staging paths are now derived from the job ID under `job-runs`, with no template or metalake name in the path, so the traversal addressed here is no longer possible through those names. #13371 is also closed. Keeping the older name-based containment patch would conflict with the new layout. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
