René's URL Explorer Experiment


Title: doc: clarify fileURLToPath security considerations by RafaelGSS · Pull Request #60887 · nodejs/node · GitHub

Open Graph Title: doc: clarify fileURLToPath security considerations by RafaelGSS · Pull Request #60887 · nodejs/node

X Title: doc: clarify fileURLToPath security considerations by RafaelGSS · Pull Request #60887 · nodejs/node

Description: Node.js JavaScript runtime ✨🐢🚀✨. Contribute to nodejs/node development by creating an account on GitHub.

Open Graph Description: Add clarification that fileURLToPath() decodes encoded dot-segments (..) which are normalized as path traversal. Applications must perform their own path validation to prevent directory travers...

X Description: Add clarification that fileURLToPath() decodes encoded dot-segments (..) which are normalized as path traversal. Applications must perform their own path validation to prevent directory travers...

Opengraph URL: https://github.com/nodejs/node/pull/60887

X: @github

direct link

Domain: redirect.github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:213aa560-cf55-7e5a-0455-b9ecead51377
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idE44E:115683:E4ECEF:132FEAC:6A4C61D9
html-safe-nonce134c36883d7c422ec9f93b35fe9b336fea567a1dc2a72e92100431c4e68c86d9
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFNDRFOjExNTY4MzpFNEVDRUY6MTMyRkVBQzo2QTRDNjFEOSIsInZpc2l0b3JfaWQiOiIxNTI2MDYyNDc5NzQ1NzY5OTQ1IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmacf155580bf767746ae6e7976e8fe1994cadca74a242185d301532508edaff4646
hovercard-subject-tagpull_request:3055024485
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/nodejs/node/60887/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/4e2eda6c692c3c9d60be0d6e807b324a620ac2f6beb02f7fc61307ed3438fa94/nodejs/node/pull/60887
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/4e2eda6c692c3c9d60be0d6e807b324a620ac2f6beb02f7fc61307ed3438fa94/nodejs/node/pull/60887
og:image:altAdd clarification that fileURLToPath() decodes encoded dot-segments (..) which are normalized as path traversal. Applications must perform their own path validation to prevent directory travers...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameRafaelGSS
hostnamegithub.com
expected-hostnamegithub.com
None3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c
turbo-cache-controlno-cache
go-importgithub.com/nodejs/node git https://github.com/nodejs/node.git
octolytics-dimension-user_id9950313
octolytics-dimension-user_loginnodejs
octolytics-dimension-repository_id27193779
octolytics-dimension-repository_nwonodejs/node
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id27193779
octolytics-dimension-repository_network_root_nwonodejs/node
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release14099438da5379150f15a2892474c7c7e6c0e55e
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://redirect.github.com/nodejs/node/pull/60887#start-of-content
https://redirect.github.com/
Sign in https://redirect.github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F60887
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://redirect.github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F60887
Sign up https://redirect.github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=nodejs%2Fnode
Reloadhttps://redirect.github.com/nodejs/node/pull/60887
Reloadhttps://redirect.github.com/nodejs/node/pull/60887
Reloadhttps://redirect.github.com/nodejs/node/pull/60887
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/60887
nodejs https://redirect.github.com/nodejs
nodehttps://redirect.github.com/nodejs/node
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/60887
Notifications https://redirect.github.com/login?return_to=%2Fnodejs%2Fnode
Fork 36k https://redirect.github.com/login?return_to=%2Fnodejs%2Fnode
Star 118k https://redirect.github.com/login?return_to=%2Fnodejs%2Fnode
Code https://redirect.github.com/nodejs/node
Issues 1.4k https://redirect.github.com/nodejs/node/issues
Pull requests 964 https://redirect.github.com/nodejs/node/pulls
Actions https://redirect.github.com/nodejs/node/actions
Projects https://redirect.github.com/nodejs/node/projects
Security and quality 0 https://redirect.github.com/nodejs/node/security
Insights https://redirect.github.com/nodejs/node/pulse
Code https://redirect.github.com/nodejs/node
Issues https://redirect.github.com/nodejs/node/issues
Pull requests https://redirect.github.com/nodejs/node/pulls
Actions https://redirect.github.com/nodejs/node/actions
Projects https://redirect.github.com/nodejs/node/projects
Security and quality https://redirect.github.com/nodejs/node/security
Insights https://redirect.github.com/nodejs/node/pulse
nodejs-github-bothttps://redirect.github.com/nodejs-github-bot
nodejs:mainhttps://redirect.github.com/nodejs/node/tree/main
RafaelGSS:clarify-security-expectations-urlhttps://redirect.github.com/RafaelGSS/node/tree/clarify-security-expectations-url
Conversationhttps://redirect.github.com/nodejs/node/pull/60887
Commits1 (1)https://redirect.github.com/nodejs/node/pull/60887/commits
Checkshttps://redirect.github.com/nodejs/node/pull/60887/checks
Files changedhttps://redirect.github.com/nodejs/node/pull/60887/files
doc: clarify fileURLToPath security considerationshttps://redirect.github.com/nodejs/node/pull/60887#top
nodejs-github-bothttps://redirect.github.com/nodejs-github-bot
nodejs:mainhttps://redirect.github.com/nodejs/node/tree/main
RafaelGSS:clarify-security-expectations-urlhttps://redirect.github.com/RafaelGSS/node/tree/clarify-security-expectations-url
https://redirect.github.com/RafaelGSS
RafaelGSShttps://redirect.github.com/RafaelGSS
Nov 28, 2025https://redirect.github.com/nodejs/node/pull/60887#issue-3676013298
@targoshttps://github.com/targos
@mcollinahttps://github.com/mcollina
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/60887
https://redirect.github.com/RafaelGSS
doc: clarify fileURLToPath security considerationshttps://redirect.github.com/nodejs/node/pull/60887/commits/0857fde85e629935412a0d968b1636021d4e9c4a
0857fdehttps://redirect.github.com/nodejs/node/pull/60887/commits/0857fde85e629935412a0d968b1636021d4e9c4a
https://redirect.github.com/nodejs-github-bot
nodejs-github-bothttps://redirect.github.com/nodejs-github-bot
doc https://redirect.github.com/nodejs/node/issues?q=state%3Aopen%20label%3Adoc
url https://redirect.github.com/nodejs/node/issues?q=state%3Aopen%20label%3Aurl
Nov 28, 2025https://redirect.github.com/nodejs/node/pull/60887#event-21248409874
https://redirect.github.com/marco-ippolito
marco-ippolitohttps://redirect.github.com/marco-ippolito
Nov 29, 2025 https://redirect.github.com/nodejs/node/pull/60887#pullrequestreview-3520605175
View reviewed changes https://redirect.github.com/nodejs/node/pull/60887/files/0857fde85e629935412a0d968b1636021d4e9c4a
https://redirect.github.com/lpinca
lpincahttps://redirect.github.com/lpinca
Nov 29, 2025 https://redirect.github.com/nodejs/node/pull/60887#pullrequestreview-3520763846
View reviewed changes https://redirect.github.com/nodejs/node/pull/60887/files/0857fde85e629935412a0d968b1636021d4e9c4a
https://redirect.github.com/cjihrig
cjihrighttps://redirect.github.com/cjihrig
Nov 29, 2025 https://redirect.github.com/nodejs/node/pull/60887#pullrequestreview-3520764792
View reviewed changes https://redirect.github.com/nodejs/node/pull/60887/files/0857fde85e629935412a0d968b1636021d4e9c4a
https://redirect.github.com/RafaelGSS
RafaelGSShttps://redirect.github.com/RafaelGSS
author ready https://redirect.github.com/nodejs/node/issues?q=state%3Aopen%20label%3A%22author%20ready%22
commit-queue https://redirect.github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue
Nov 29, 2025https://redirect.github.com/nodejs/node/pull/60887#event-21252773026
https://redirect.github.com/mcollina
mcollinahttps://redirect.github.com/mcollina
Nov 29, 2025 https://redirect.github.com/nodejs/node/pull/60887#pullrequestreview-3520805199
View reviewed changes https://redirect.github.com/nodejs/node/pull/60887/files/0857fde85e629935412a0d968b1636021d4e9c4a
mcollinahttps://redirect.github.com/mcollina
https://redirect.github.com/nodejs/node/pull/60887#pullrequestreview-3520805199
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/60887
https://redirect.github.com/nodejs-github-bot
nodejs-github-bothttps://redirect.github.com/nodejs-github-bot
commit-queue https://redirect.github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue
Nov 30, 2025https://redirect.github.com/nodejs/node/pull/60887#event-21260697025
https://redirect.github.com/nodejs-github-bot
nodejs-github-bothttps://redirect.github.com/nodejs-github-bot
6f7f51bhttps://redirect.github.com/nodejs/node/commit/6f7f51b8f104dcebb96ac407b489719cc51e124a
Nov 30, 2025https://github.com/nodejs/node/pull/60887#event-21260712407
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/60887
https://redirect.github.com/nodejs-github-bot
nodejs-github-bothttps://redirect.github.com/nodejs-github-bot
Nov 30, 2025https://redirect.github.com/nodejs/node/pull/60887#issuecomment-3593589979
6f7f51bhttps://github.com/nodejs/node/commit/6f7f51b8f104dcebb96ac407b489719cc51e124a
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/60887
targoshttps://redirect.github.com/targos
Dec 5, 2025 https://redirect.github.com/nodejs/node/pull/60887#ref-commit-f7effb2
https://redirect.github.com/RafaelGSS
https://redirect.github.com/targos
doc: clarify fileURLToPath security considerationshttps://redirect.github.com/nodejs/node/commit/f7effb2897f1bd5b013755459348216f65f8b6e1
f7effb2https://redirect.github.com/nodejs/node/commit/f7effb2897f1bd5b013755459348216f65f8b6e1
#60887https://github.com/nodejs/node/pull/60887
aduh95https://redirect.github.com/aduh95
Jan 9, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-commit-36a9935
https://redirect.github.com/RafaelGSS
https://redirect.github.com/aduh95
doc: clarify fileURLToPath security considerationshttps://redirect.github.com/nodejs/node/commit/36a99355b7b7c49f24d83b632dd684e4056bd91f
36a9935https://redirect.github.com/nodejs/node/commit/36a99355b7b7c49f24d83b632dd684e4056bd91f
#60887https://github.com/nodejs/node/pull/60887
RafaelGSShttps://redirect.github.com/RafaelGSS
Jan 13, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-commit-9a9bed9
https://redirect.github.com/RafaelGSS
doc: clarify fileURLToPath security considerationshttps://redirect.github.com/nodejs/node/commit/9a9bed9b3a1ab2bfd9a43577c13e6095950bfb66
9a9bed9https://redirect.github.com/nodejs/node/commit/9a9bed9b3a1ab2bfd9a43577c13e6095950bfb66
#60887https://github.com/nodejs/node/pull/60887
https://redirect.github.com/apps/github-actions
github-actionshttps://redirect.github.com/apps/github-actions
Jan 16, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-pullrequest-3822224144
2026-01-19, Version 25.4.0 (Current) #61400 https://redirect.github.com/nodejs/node/pull/61400
aduh95https://redirect.github.com/aduh95
Jan 19, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-commit-28b2848
https://redirect.github.com/RafaelGSS
https://redirect.github.com/aduh95
doc: clarify fileURLToPath security considerationshttps://redirect.github.com/nodejs/node/commit/28b284880e802faa08ecfe54e4bbdf3f3e0d2437
28b2848https://redirect.github.com/nodejs/node/commit/28b284880e802faa08ecfe54e4bbdf3f3e0d2437
#60887https://github.com/nodejs/node/pull/60887
tmeijnhttps://redirect.github.com/tmeijn
Jan 22, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-commit-d3d819e
https://redirect.github.com/tmeijn
build(deps): update node to v25.4.0https://redirect.github.com/tmeijn/dotfiles/commit/d3d819e37760131eb0853233a474780d24051202
d3d819ehttps://redirect.github.com/tmeijn/dotfiles/commit/d3d819e37760131eb0853233a474780d24051202
https://redirect.github.com/apps/github-actions
github-actionshttps://redirect.github.com/apps/github-actions
Feb 3, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-pullrequest-3892697171
2026-02-10, Version 24.13.1 'Krypton' (LTS) #61661 https://redirect.github.com/nodejs/node/pull/61661
aduh95https://redirect.github.com/aduh95
Feb 17, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-commit-d9d97b3
https://redirect.github.com/RafaelGSS
https://redirect.github.com/aduh95
doc: clarify fileURLToPath security considerationshttps://redirect.github.com/nodejs/node/commit/d9d97b34d790fbfb5b58a58105cbd25366a80390
d9d97b3https://redirect.github.com/nodejs/node/commit/d9d97b34d790fbfb5b58a58105cbd25366a80390
#60887https://github.com/nodejs/node/pull/60887
aduh95https://redirect.github.com/aduh95
Feb 19, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-commit-01323dc
https://redirect.github.com/RafaelGSS
https://redirect.github.com/aduh95
doc: clarify fileURLToPath security considerationshttps://redirect.github.com/nodejs/node/commit/01323dcb77b456d27d26d7980bd540f5c4f0d6b2
01323dchttps://redirect.github.com/nodejs/node/commit/01323dcb77b456d27d26d7980bd540f5c4f0d6b2
#60887https://github.com/nodejs/node/pull/60887
aduh95https://redirect.github.com/aduh95
Feb 21, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-commit-cad312a
https://redirect.github.com/RafaelGSS
https://redirect.github.com/aduh95
doc: clarify fileURLToPath security considerationshttps://redirect.github.com/nodejs/node/commit/cad312ab77e14b753868ee878dd478eb9cdd1bd3
cad312ahttps://redirect.github.com/nodejs/node/commit/cad312ab77e14b753868ee878dd478eb9cdd1bd3
#60887https://github.com/nodejs/node/pull/60887
https://redirect.github.com/aduh95
aduh95https://redirect.github.com/aduh95
Feb 22, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-pullrequest-3975660233
V22.22.1 proposal #61947 https://redirect.github.com/nodejs/node/pull/61947
aduh95https://redirect.github.com/aduh95
Feb 23, 2026 https://redirect.github.com/nodejs/node/pull/60887#ref-commit-e615b9e
https://redirect.github.com/RafaelGSS
https://redirect.github.com/aduh95
doc: clarify fileURLToPath security considerationshttps://redirect.github.com/nodejs/node/commit/e615b9e2f2e0e25df5bca6ebc2805a0b93fec121
e615b9ehttps://redirect.github.com/nodejs/node/commit/e615b9e2f2e0e25df5bca6ebc2805a0b93fec121
#60887https://github.com/nodejs/node/pull/60887
https://github.co/hiddenchars
https://redirect.github.com/nodejs/node/pull/{{ revealButtonHref }}
Sign up for freehttps://redirect.github.com/join?source=comment-repo
Sign in to commenthttps://redirect.github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F60887
https://redirect.github.com/mcollina
mcollina https://redirect.github.com/mcollina
https://redirect.github.com/nodejs/node/pull/60887/files/0857fde85e629935412a0d968b1636021d4e9c4a
https://redirect.github.com/lpinca
lpinca https://redirect.github.com/lpinca
https://redirect.github.com/nodejs/node/pull/60887/files/0857fde85e629935412a0d968b1636021d4e9c4a
https://redirect.github.com/cjihrig
cjihrig https://redirect.github.com/cjihrig
https://redirect.github.com/nodejs/node/pull/60887/files/0857fde85e629935412a0d968b1636021d4e9c4a
https://redirect.github.com/marco-ippolito
marco-ippolito https://redirect.github.com/marco-ippolito
https://redirect.github.com/nodejs/node/pull/60887/files/0857fde85e629935412a0d968b1636021d4e9c4a
author ready https://redirect.github.com/nodejs/node/issues?q=state%3Aopen%20label%3A%22author%20ready%22
doc https://redirect.github.com/nodejs/node/issues?q=state%3Aopen%20label%3Adoc
url https://redirect.github.com/nodejs/node/issues?q=state%3Aopen%20label%3Aurl
Please reload this pagehttps://redirect.github.com/nodejs/node/pull/60887
https://redirect.github.com/RafaelGSS
https://redirect.github.com/nodejs-github-bot
https://redirect.github.com/mcollina
https://redirect.github.com/lpinca
https://redirect.github.com/cjihrig
https://redirect.github.com/marco-ippolito
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.