Reject backslashes in confined file paths

2026-07-18 13:36:10 +00:00
parent 47bacc7abb
commit 9746a42e04
2 changed files with 2 additions and 2 deletions
--- a/internal/core/fileio/fileio.go
+++ b/internal/core/fileio/fileio.go
@@ -19,7 +19,7 @@ func SafePath(root, name string) (string, error) {
 	if name == "" {
 		return "", fmt.Errorf("artifact name must not be empty")
 	}
-	if strings.Contains(name, `\\`) {
+	if strings.ContainsRune(name, '\\') {
 		return "", fmt.Errorf("artifact name %q must use slash-separated relative paths", name)
 	}
 	if path.IsAbs(name) || filepath.IsAbs(name) {