Add validation to helm values file path to prevent potential dirtrav vulnerability#3726

Merged

Szarny merged 21 commits intopipe-cd:masterfrom

Szarny:feature/3719-helm-value-validation

Jun 7, 2022

Commits on Jun 3, 2022

Add checkHelmValueFilePath function
Tsubasa Umeuchi
committed

Commits on Jun 6, 2022

Add function to resolve symlink
Tsubasa Umeuchi
committed
Update logic to prevent the values file from being placed outside of the app config directory
Tsubasa Umeuchi
committed
Add unit tests
Tsubasa Umeuchi
committed

Commits on Jun 7, 2022

Fix bug in resolve symlink
Tsubasa Umeuchi
committed
Add verification for remote chart
Tsubasa Umeuchi
committed
Add comment
Tsubasa Umeuchi
committed
Remove test code
Tsubasa Umeuchi
committed
Add document
Tsubasa Umeuchi
committed
Update docs
Tsubasa Umeuchi
committed
Merge commit 'bdf86d5b43aa2921efc63b39361b95b716705f69' into feature/3719-helm-value-validation
Tsubasa Umeuchi
committed
Remove debug code
Tsubasa Umeuchi
committed
Update test name
Tsubasa Umeuchi
committed
Fix typo
Tsubasa Umeuchi
committed
Update docs/content/en/docs-dev/user-guide/configuration-reference.md

Szarny
and
khanhtc1202
authored
Fix typo
Tsubasa Umeuchi
committed
Refactoring logic about resolve symlink
Tsubasa Umeuchi
committed
Fix comment typo
Tsubasa Umeuchi
committed
Update pkg/app/piped/cloudprovider/kubernetes/helm.go

Szarny
and
khanhtc1202
authored
Update docs
Tsubasa Umeuchi
committed
Remove `absAppDir` because `appDir` is always absolute path
Tsubasa Umeuchi
committed