Skip to content

[release-22.0] backupengine: disallow path traversals via backup MANIFEST on restore (#19470)#19477

Merged
timvaillancourt merged 1 commit intorelease-22.0from
backport-19470-to-release-22.0
Feb 25, 2026
Merged

[release-22.0] backupengine: disallow path traversals via backup MANIFEST on restore (#19470)#19477
timvaillancourt merged 1 commit intorelease-22.0from
backport-19470-to-release-22.0

Conversation

@vitess-bot
Copy link
Copy Markdown
Contributor

@vitess-bot vitess-bot bot commented Feb 25, 2026

Description

This is a backport of #19470

…tore (#19470)

Signed-off-by: Tim Vaillancourt <tim@timvaillancourt.com>
@vitess-bot vitess-bot bot added Type: Bug Type: Enhancement Logical improvement (somewhere between a bug and feature) Backport This is a backport Component: Backup and Restore Type: Security labels Feb 25, 2026
@github-actions github-actions bot added this to the v22.0.4 milestone Feb 25, 2026
@codecov
Copy link
Copy Markdown

codecov bot commented Feb 25, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.48%. Comparing base (27d1f07) to head (3248b25).
⚠️ Report is 2 commits behind head on release-22.0.

Additional details and impacted files
@@               Coverage Diff                @@
##           release-22.0   #19477      +/-   ##
================================================
+ Coverage         69.47%   69.48%   +0.01%     
================================================
  Files              1601     1601              
  Lines            213651   213651              
================================================
+ Hits             148426   148452      +26     
+ Misses            65225    65199      -26     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@timvaillancourt timvaillancourt enabled auto-merge (squash) February 25, 2026 22:29
@timvaillancourt timvaillancourt merged commit 1520b7a into release-22.0 Feb 25, 2026
128 of 129 checks passed
@timvaillancourt timvaillancourt deleted the backport-19470-to-release-22.0 branch February 25, 2026 22:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Backport This is a backport Component: Backup and Restore Type: Bug Type: Enhancement Logical improvement (somewhere between a bug and feature) Type: Security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant