When saving media or handling files, wacli relies on path sanitization. Previously, null bytes (\x00) and certain control characters were not explicitly stripped, which can lead to path traversal vulnerabilities when interfacing with the underlying OS file system. This safely strips null bytes and control characters inside `SanitizeSegment` and `SanitizeFilename`. Closes #60 |
||
|---|---|---|
| .. | ||
| sanitize_test.go | ||
| sanitize.go | ||