Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1qiq3g-0081QU-LJ for pgadmin-hackers@arkaria.postgresql.org; Wed, 20 Sep 2023 05:47:32 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1qiq3f-00Ecof-4t for pgadmin-hackers@arkaria.postgresql.org; Wed, 20 Sep 2023 05:47:31 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1qiq3e-00EcoK-Re for pgadmin-hackers@lists.postgresql.org; Wed, 20 Sep 2023 05:47:30 +0000 Received: from out-19.smtp.github.com ([192.30.252.202]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1qiq3V-006Ftt-ED for pgadmin-hackers@lists.postgresql.org; Wed, 20 Sep 2023 05:47:28 +0000 Received: from github.com (hubbernetes-node-561eeb6.va3-iad.github.net [10.48.13.24]) by smtp.github.com (Postfix) with ESMTPA id ABC1894106E for ; Tue, 19 Sep 2023 22:47:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2023; t=1695188839; bh=IOhEj1Ria+AhnVeHmdohXrxRldB/BnSvpek/fqGhY8M=; h=Date:From:To:Subject:From; b=jwYzCGm5rv0hLDyVUlvtPpotbeZ9lcelqj/7o30eDBGPZvSPJO13r9d1MTrAeDgEX /E0LfX1a12+t4e0IGcKS2zlSdLrohx28//hgYoHAtuLNEOWkKIEU5j+MuIy3D3y44Q wd0VoaiKSsFWDP6KUspRWE213xucAr/Wo4Ekc6JQ= Date: Tue, 19 Sep 2023 22:47:19 -0700 From: Aditya Toshniwal To: pgadmin-hackers@lists.postgresql.org Message-ID: Subject: [pgadmin-org/pgadmin4] 35f05e: Fix the security issue of validate bin path to con... Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: pgadmin-hackers@lists.postgresql.org X-Auto-Response-Suppress: All List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Branch: refs/heads/master Home: https://github.com/pgadmin-org/pgadmin4 Commit: 35f05e49b3632a0a674b9b36535a7fe2d93dd0c2 https://github.com/pgadmin-org/pgadmin4/commit/35f05e49b3632a0a674b9b36535a7fe2d93dd0c2 Author: Aditya Toshniwal Date: 2023-09-20 (Wed, 20 Sep 2023) Changed paths: M web/pgadmin/misc/__init__.py M web/pgadmin/utils/__init__.py Log Message: ----------- Fix the security issue of validate bin path to consider and fix more scenarios. #6763