You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on May 2, 2023. It is now read-only.
test it by creating a simple container that’s like
FROM bt/nabla-node-base
ENTRYPOINT ["../../../../../../some.nabla"] or ENTRYPOINT["/some.nabla"]
and have the some.nabla be somewhere in the host file system
so the solution would to ensure that ENTRYPOINT resolves to it’s own root
so like ../../some.nabla should resolve to /some.nabla before setting the nabla launch path to container_rootfs/ENTRYPOINT
Check if it is possible to perform directory traversal attacks against the runtime and protect against them if possible.
Where this may come up is in the specifying of the
.nabla
file being specified when passed torunnc-cont
/nabla-run
.The text was updated successfully, but these errors were encountered: