Tighten path containment in Live Migration file route - #367

Open

nvharikrishna wants to merge 4 commits into

apache:trunkfrom

nvharikrishna:lm-file-resolver-double-encoded-path-traversal

Commits on Aug 9, 2026

Added an entry into CHANGES.txt
nvharikrishna
committed
d52d620
CASSSIDECAR-479 Harden the live migration file route against symlink-based path traversal by validating that the canonical resolved path stays within the configured directory. Return clearer HTTP s…
nvharikrishna
committed
7ec20ee
Addressed review comments.
nvharikrishna
committed
c438485
Replace the static base-dir realpath cache with a lexical fast path in verifyContainment.
nvharikrishna
committed
d6d05bb