Disallow absolute path at the raw WASI level

nodejs / uvwasi

WASI syscall API built atop libuv

MIT License

222 stars 48 forks source link

Disallow absolute path at the raw WASI level #270

Closed yagehu closed 1 month ago

yagehu commented 1 month ago

This commit fixes a path_open behavior that allows opening absolute paths. Although the path normalization correctly resolves the path and enforces the sandbox, it's still a good idea to converge with other runtimes here.

fixes #269