API Use Symfony's Path class

silverstripe / silverstripe-graphql

Serves Silverstripe data as GraphQL representations

BSD 3-Clause "New" or "Revised" License

52 stars 61 forks source link

API Use Symfony's Path class #605

Closed GuySartorelli closed 1 month ago

GuySartorelli commented 1 month ago

Reflects changes in https://github.com/silverstripe/silverstripe-framework/pull/11380

Issue

https://github.com/silverstripe/silverstripe-framework/issues/11340

GuySartorelli commented 1 month ago

No need for path traversal protection anywhere here because if an attacker can manipulate these paths they already control either your server or your codebase.