LibraryOfCongress / bagit-python

Work with BagIt packages from Python.
http://libraryofcongress.github.io/bagit-python
218 stars 85 forks source link

Validate bag file paths #80

Closed acdha closed 7 years ago

acdha commented 7 years ago

We should apply the tests specified in the spec section on Special directory characters to ensure that manifest or fetch.txt entries which attempt to escape the bag location cause an error:

../
/
~root/
C:\
\\?\C:\

Parallel issue for bagit-java: https://github.com/LibraryOfCongress/bagit-java/issues/67