insert-beginning: add some sanity checking on the passed filename

The file should exist, and should not have any '.' or '..' path components. Signed-off-by: Elijah Newren <[email protected]>
newren · Nov 24, 2024 · 93b3a00 · 93b3a00
1 parent c9dda33
commit 93b3a00
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/contrib/filter-repo-demos/insert-beginning b/contrib/filter-repo-demos/insert-beginning
@@ -33,6 +33,10 @@ parser.add_argument('--file', type=os.fsencode,
 args = parser.parse_args()
 if not args.file:
   raise SystemExit("Error: Need to specify the --file option")
+if any([x == b"." or x== b".." for x in args.file.split(b"/")]):
+  raise SystemExit(f"Error: Invalid path components in {fr.decode(args.file)}")
+if not os.path.isfile(args.file):
+  raise SystemExit(f"Error: {fr.decode(args.file)} not found")
 
 fhash = subprocess.check_output(['git', 'hash-object', '-w', args.file]).strip()
 fmode = b'100755' if os.access(args.file, os.X_OK) else b'100644'