fix(auth): harden Windows storage bridge

2026-08-16 22:16:13 +02:00
parent c9b02fc57e
commit 7d9ca13f1d
12 changed files with 473 additions and 29 deletions
@@ -65,6 +65,13 @@ func createCanonicalNewPrivateFile(path string, mode os.FileMode) (*os.File, err
 	return file, nil
 }

+func createCanonicalNewPrivateParentFile(path string, mode os.FileMode) (*os.File, error) {
+	if err := ValidatePrivateDirectory(filepath.Dir(path)); err != nil {
+		return nil, ErrUnsafeFile
+	}
+	return createCanonicalNewPrivateFile(path, mode)
+}
+
 // ValidatePrivateRegular requires a canonical, single-link private regular file.
 func ValidatePrivateRegular(path string) error {
 	if err := ValidateCanonicalPath(path); err != nil {