mirror of
https://github.com/vhaudiquet/ecrou.git
synced 2026-11-12 22:22:44 +00:00
Whiteout markers trusted the archive's own path, so a crafted `.wh.` entry carrying `..` could delete host directories above the rootfs. Both branches now go through `safe_join`, and a `.wh..` marker, whose target is the parent directory itself, is refused with them.