photocraft

mirror of https://github.com/storytold/photocraft.git synced 2026-10-24 09:57:08 -06:00

Files

T

Dylan M. Taylor ef6092b125 security(xtask): validate corpus paths and bound symlink traversal

Row 16 (9f6a3c79): preserve platform filename semantics in corpus scans
(no backslash-to-separator rewrite on Unix) and enforce destination
containment before copying files into the corpus directory.

Row 20 (6e2a985b): skip directory symlinks, dedupe visited directories by
canonical identity, and cap total directories/files so symlink cycles can
no longer drive exponential traversal.

Fixes findings 9f6a3c79-8bdf-4751-8eb4-87d3154074c9 and
6e2a985b-6b14-4b97-af07-7ca8333b9b75.

2026-10-22 07:11:30 -04:00

src

security(xtask): validate corpus paths and bound symlink traversal

2026-10-22 07:11:30 -04:00

affinity-corpus.sha256

Affinity import: special shapes and sample corpus (#1606 ) (#2035 )

2026-10-09 19:27:35 -04:00

atn-corpus.sha256

Pin a corpus of real Photoshop Actions sets and test the .atn parser and import on it (#219 )

2026-10-13 08:29:38 -05:00

Cargo.toml

pixls corpus: in-house sha256 and pinned.rs, opt-in like the affinity corpus