be4960a255
GitHub's Artifact API now rejects artifact names like '..' server-side with a 400 Bad Request, making it impossible to create artifacts with path traversal names. This means the scenario this test was verifying (that gh run download catches traversal names) can no longer be reproduced through normal artifact creation. The client-side traversal check in gh run download remains in place as a defense-in-depth measure. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| cache-list-delete.txtar | ||
| cache-list-empty.txtar | ||
| run-cancel.txtar | ||
| run-delete.txtar | ||
| run-download.txtar | ||
| run-rerun.txtar | ||
| run-view.txtar | ||
| workflow-enable-disable.txtar | ||
| workflow-list.txtar | ||
| workflow-run.txtar | ||
| workflow-view.txtar | ||