[PR #125] [MERGED] Filename sanitizer fallback #304

Closed
opened 2026-02-26 21:34:31 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/rudrankriyam/App-Store-Connect-CLI/pull/125
Author: @cursor[bot]
Created: 1/24/2026
Status: Merged
Merged: 1/24/2026
Merged by: @rudrankriyam

Base: cursor/signing-files-fetch-command-d654Head: cursor/filename-sanitizer-fallback-ff6c


📝 Commits (1)

  • f5974f5 Sanitize fallback filename

📊 Changes

1 file changed (+8 additions, -7 deletions)

View changed files

📝 cmd/signing_fetch.go (+8 -7)

📄 Description

Sanitize the fallback value in safeFileName to prevent potential path traversal vulnerabilities.



🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/rudrankriyam/App-Store-Connect-CLI/pull/125 **Author:** [@cursor[bot]](https://github.com/apps/cursor) **Created:** 1/24/2026 **Status:** ✅ Merged **Merged:** 1/24/2026 **Merged by:** [@rudrankriyam](https://github.com/rudrankriyam) **Base:** `cursor/signing-files-fetch-command-d654` ← **Head:** `cursor/filename-sanitizer-fallback-ff6c` --- ### 📝 Commits (1) - [`f5974f5`](https://github.com/rudrankriyam/App-Store-Connect-CLI/commit/f5974f5db72d32555792eda8d443334854cd62b8) Sanitize fallback filename ### 📊 Changes **1 file changed** (+8 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `cmd/signing_fetch.go` (+8 -7) </details> ### 📄 Description Sanitize the fallback value in `safeFileName` to prevent potential path traversal vulnerabilities. --- --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-02-26 21:34:31 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/App-Store-Connect-CLI#304
No description provided.