Skip to content

Fix symlinks to handle path traversal changes - #16

Merged
thespad merged 1 commit into
mainfrom
symlinks
Aug 16, 2026
Merged

thespad merged 1 commit into
mainfrom
symlinks

Conversation

@thespad

@thespad thespad commented Aug 15, 2026

Copy link
Copy Markdown
Member

linuxserver.io


  • I have read the contributing guideline and understand that I have made the correct modifications

Description:

Latest upstream release breaks any uploads that aren't under the upload folder hierarchy in /app/data to prevent path traversal attacks, so symlinks won't work any more. Instead we can update the sails config at init to set our own upload root, so that the checks will pass.

Logs symlink is still fine.

Also updated local build version checks to use jq

Benefits of this PR and context:

How Has This Been Tested?

Source / References:

@thespad
thespad requested a review from a team August 15, 2026 16:40
@thespad thespad self-assigned this Aug 15, 2026
@LinuxServer-CI LinuxServer-CI moved this to PRs Ready For Team Review in Issue & PR Tracker Aug 15, 2026
@LinuxServer-CI

Copy link
Copy Markdown
Contributor

I am a bot, here is the pushed image/manifest for this PR for commit 51b1445 :

ghcr.io/linuxserver/lspipepr-planka:v2.2.1-pkg-7be78112-dev-51b1445633ec5a2a1b8a3355b3b538627c9b3777-pr-16

@thespad thespad mentioned this pull request Aug 15, 2026
Comment thread .github/FUNDING.yml
@github-project-automation github-project-automation Bot moved this from PRs Ready For Team Review to PRs Approved in Issue & PR Tracker Aug 16, 2026
@LinuxServer-CI LinuxServer-CI moved this from PRs Approved to PRs in Issue & PR Tracker Aug 16, 2026
@thespad
thespad merged commit 8fcc817 into main Aug 16, 2026
8 checks passed
@thespad
thespad deleted the symlinks branch August 16, 2026 13:32
@LinuxServer-CI LinuxServer-CI moved this from PRs to Done in Issue & PR Tracker Aug 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Development

Successfully merging this pull request may close these issues.

3 participants