mirror of
https://github.com/flatpak/flatpak.git
synced 2026-10-06 12:59:38 -04:00
We pass them on to internal functions which assume that they are valid, and specifically also create paths which contain those strings which can be used for path traversal attacks. Let's simply consistently validate all of those arguments. Resolves: https://github.com/flatpak/flatpak/security/advisories/GHSA-v2gw-v9h5-9q4x