Skip to content

Refactor path helper module; enforce stricter file serving policy - #40

Merged
szeka9 merged 2 commits into
mainfrom
development
Jul 26, 2026
Merged

Refactor path helper module; enforce stricter file serving policy#40
szeka9 merged 2 commits into
mainfrom
development

Conversation

@szeka9

@szeka9 szeka9 commented Jul 26, 2026

Copy link
Copy Markdown
Owner

No description provided.

Rename pyrobusta.utils.helpers to "lexpath" as the module
mostly contains helper functions related to lexical path
normalization and validation.
@szeka9 szeka9 changed the title Refactor path helper module; enfroce stricter file serving policy Refactor path helper module; enforce stricter file serving policy Jul 26, 2026
Add a new helper function to determine if a file
is used for configuration. Prevent such files
to be served over HTTP.

Although the default configuration prevented the
aforementioned scenario, misconfiguration
still allows config files to be accidentally
served.
@szeka9
szeka9 merged commit 0923a14 into main Jul 26, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant