search

oras-project / oras-go

ORAS Go library
https://oras.land
Apache License 2.0
173 stars 94 forks source link

should forbid a symlink containing a symlink when pushing #646

Closed wangxiaoxuan273 closed 9 months ago

wangxiaoxuan273 commented 10 months ago

By design, a symlink containing a symlink is forbidden, as it introduces security risks. An error is returned at pull when such a link is detected, as shown in #636.

However, pushing such a symlink works fine. We should add a check to push as well. The behavior of push and pull should be consistent.

shizhMSFT commented 9 months ago

Closing this feature request as it conflicts with #644.