You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
The mount target is not checked/validated to be a valid path. This allows for interesting targets to be used.
To Reproduce
launch multipass GUI
create a mount with a valid source but invalid target such as " & mkdir hello & "
observe mount fails for some reason, that may not be "bad mount point"
shell into the instance
observe ~/hello exists
Also works in CLI but less interesting.
Expected behavior
The daemon prevents the usage of such targets without allowing side effects.
Additional context
Mount source is verified to be an existing file but, it might make sense to also validate the source as well. Windows paths are important to consider for both source and target since C:\foo\ is a valid path.
The text was updated successfully, but these errors were encountered:
Describe the bug
The mount target is not checked/validated to be a valid path. This allows for interesting targets to be used.
To Reproduce
" & mkdir hello & "
~/hello
existsAlso works in CLI but less interesting.
Expected behavior
The daemon prevents the usage of such targets without allowing side effects.
Additional context
Mount source is verified to be an existing file but, it might make sense to also validate the source as well. Windows paths are important to consider for both source and target since
C:\foo\
is a valid path.The text was updated successfully, but these errors were encountered: