search

deislabs / mystikos

Tools and runtime for launching unmodified container images in Trusted Execution Environments
142 stars 49 forks source link

add injection attack check #1465

Closed salsal97 closed 1 year ago

salsal97 commented 1 year ago

This should fix https://github.com/deislabs/mystikos/security/code-scanning/3479

CyanDevs commented 1 year ago

What happens if the user puts in an absolute file path? Is it enough to consider anything above to the current directory to be uncontrolled?

salsal97 commented 1 year ago

This PR is not required