dir: Reuse app_files_dfd for .ref write during deploy

Browse Source

The previous code built a path from checkoutdir_basename + "files" and
opened it via glnx_opendirat(deploy_base_dfd, ...). Since O_NOFOLLOW
only applies to the last path component, a symlink at the intermediate
checkoutdir_basename component would be followed. Reuse the
already-open app_files_dfd instead.

Hardening related to CVE-2026-97023, CVE-2026-97024

Helps: https://github.com/flatpak/flatpak/security/advisories/GHSA-5p67-xh8x-rq54
Helps: https://github.com/flatpak/flatpak/security/advisories/GHSA-8xgq-v545-vgvf

...

This commit is contained in:

500 Internal Server Error

Gitea Version: 1.28.0+dev-477-g8b6ad49a5f