sebbASF opened a new issue, #1579: URL: https://github.com/apache/tooling-trusted-releases/issues/1579
Navigate to https://releases.apache.org/vote/asyncband/0.7.2 Click on Browse Files, i.e. https://releases.apache.org/download/path/asyncband/0.7.2 ``` Path cannot contain directory traversal An error occurred while processing your request. This has been logged and will be addressed. Status code: 500 Request ID: 4dd50fb9-a838-4fd9-b38b-094520210222 Technical details Traceback (most recent call last): File "/opt/atr/.venv/lib/python3.14/site-packages/quart/app.py", line 1501, in full_dispatch_request result = await self.dispatch_request(request_context) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/atr/.venv/lib/python3.14/site-packages/quart/app.py", line 1598, in dispatch_request return await self.ensure_async(handler)(**request_.view_args) # type: ignore[return-value] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/atr/atr/blueprints/get.py", line 71, in wrapper response = await func(enhanced_session, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/atr/atr/get/download.py", line 114, in path_empty return await _download_or_list(project_key, version_key, None) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/atr/atr/get/download.py", line 232, in _download_or_list full_path = paths.release_directory(release) / validated_path ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~ File "/opt/atr/atr/models/safe.py", line 126, in __truediv__ validated = other if isinstance(other, SafeType) else RelPath(str(other)) ~~~~~~~^^^^^^^^^^^^ File "/opt/atr/atr/models/safe.py", line 62, in __init__ self._additional_validations(value) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^ File "/opt/atr/atr/models/safe.py", line 270, in _additional_validations raise ValueError("Path cannot contain directory traversal") ValueError: Path cannot contain directory traversal ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
