Skip to content

[Backport] Validate base_path in FsRepository to prevent path.repo containment bypass - #22381

Merged
cwperks merged 1 commit into
opensearch-project:2.19from
kh3ra:fs-repo-fix-2.19
Jul 2, 2026
Merged

cwperks merged 1 commit into
opensearch-project:2.19from
kh3ra:fs-repo-fix-2.19

Validate base_path in FsRepository to prevent path.repo containment b…

f837d46
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded Jul 2, 2026 in 0s

72.11% (target 70.00%)

View this Pull Request on Codecov

72.11% (target 70.00%)

Details

Codecov Report

❌ Patch coverage is 47.05882% with 9 lines in your changes missing coverage. Please review.
✅ Project coverage is 72.11%. Comparing base (aff3489) to head (f837d46).
⚠️ Report is 14 commits behind head on 2.19.

Files with missing lines Patch % Lines
...a/org/opensearch/repositories/fs/FsRepository.java 47.05% 4 Missing and 5 partials ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##               2.19   #22381      +/-   ##
============================================
+ Coverage     71.92%   72.11%   +0.18%     
+ Complexity    66009    64486    -1523     
============================================
  Files          5342     5121     -221     
  Lines        307392   300247    -7145     
  Branches      44862    44095     -767     
============================================
- Hits         221105   216532    -4573     
+ Misses        67823    65525    -2298     
+ Partials      18464    18190     -274     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.