René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Preventing path traversal by plugins?","articleBody":"Hi! sqlc looks neat and I'm playing around with it.\r\n\r\nThe docs make this statement:\r\n\r\n\u003e WASM plugins are fully sandboxed; they do not have access to the network, filesystem, or environment variables.\r\n\r\nThis caused me to look into how filesystem writes are performed. Am I misinterpreting the code, or does the use of path.Join allow for path traversal attacks? e.g. if a plugin emits a path beginning with `../../../`. I don't speak any Go, but my read of the Clean function (which appears to be applied automatically to the result of Join) is that it only normalizes `..` _inside_ a path and preserves it at the front.\r\n\r\nApologies in advance if I've missed the defense against this.","author":{"url":"https://github.com/cbiffle","@type":"Person","name":"cbiffle"},"datePublished":"2024-02-12T20:25:05.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":10},"url":"https://github.com/3194/sqlc/issues/3194"}