diff options
| author | Igor Soarez <igor@soarez.org> | 2026-11-06 09:20:16 +0000 |
|---|---|---|
| committer | Igor Soarez <igor@soarez.org> | 2026-11-06 09:20:16 +0000 |
| commit | 85b49885256464b735923eaa771044706383718f (patch) | |
| tree | d33011957165eae9dabf3e3d5bf39a71e309bfb0 /scripts | |
| parent | ee1ddab7f9f24adfc55a41e62efa3156a282c7a8 (diff) | |
broker: refuse uploads from outside the staging directory
page.upload and a raw DOM.setFileInputFiles through cdp.call now have to name
files whose real path is under /tmp/pi-chrome-uploads (PI_CHROME_UPLOAD_DIR),
on the broker's host. Anyone holding the token could otherwise attach any file
the user can read to a page.
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions