mirror of
https://github.com/kubernetes-sigs/kustomize.git
synced 2026-05-17 18:25:26 +00:00
7fae7d1bd6
* Move api/filesys to kyaml/filesys * Add deprecated version of api/filesys with aliases to new code * Use new kyaml/filesys package and update dependencies * Migrate to kyaml/filesys and update dependencies * Skip tests that break on Windows
36 lines
780 B
Go
36 lines
780 B
Go
// Copyright 2019 The Kubernetes Authors.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package loader
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"sigs.k8s.io/kustomize/kyaml/filesys"
|
|
)
|
|
|
|
type LoadRestrictorFunc func(
|
|
filesys.FileSystem, filesys.ConfirmedDir, string) (string, error)
|
|
|
|
func RestrictionRootOnly(
|
|
fSys filesys.FileSystem, root filesys.ConfirmedDir, path string) (string, error) {
|
|
d, f, err := fSys.CleanedAbs(path)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
if f == "" {
|
|
return "", fmt.Errorf("'%s' must resolve to a file", path)
|
|
}
|
|
if !d.HasPrefix(root) {
|
|
return "", fmt.Errorf(
|
|
"security; file '%s' is not in or below '%s'",
|
|
path, root)
|
|
}
|
|
return d.Join(f), nil
|
|
}
|
|
|
|
func RestrictionNone(
|
|
_ filesys.FileSystem, _ filesys.ConfirmedDir, path string) (string, error) {
|
|
return path, nil
|
|
}
|