isomorphic-git 1.38.7 → 1.38.8

package/index.cjs

@@ -6890,23 +6890,11 @@ async function branch({
   }
 }
 
-const worthWalking = (filepath, root) => {
-  if (filepath === '.' || root == null || root.length === 0 || root === '.') {
-    return true
-  }
-  if (root.length >= filepath.length) {
-    return root.startsWith(filepath)
-  } else {
-    return filepath.startsWith(root)
-  }
-};
-
-// @ts-check
-
 /**
- * Throw if any leading directory component of `fullpath` (relative to `dir`) is a symbolic
- * link. git does not follow symlinks in the leading path when writing working-tree files;
- * matching that avoids writing through a symlinked parent into a location outside `dir`.
+ * Refuse to materialize a working-tree entry whose parent path traverses a
+ * symbolic link. A leading component that is a symlink could otherwise redirect
+ * a write or mkdir outside the working tree. git applies the same check: it does
+ * not follow symlinks in the leading path when writing working-tree files.
  *
  * @param {import('../models/FileSystem.js').FileSystem} fs
  * @param {string} dir
@@ -6927,6 +6915,19 @@ async function assertNoSymlinkInLeadingPath(fs, dir, fullpath) {
   }
 }
 
+const worthWalking = (filepath, root) => {
+  if (filepath === '.' || root == null || root.length === 0 || root === '.') {
+    return true
+  }
+  if (root.length >= filepath.length) {
+    return root.startsWith(filepath)
+  } else {
+    return filepath.startsWith(root)
+  }
+};
+
+// @ts-check
+
 /**
  * @param {object} args
  * @param {import('../models/FileSystem.js').FileSystem} args.fs
@@ -8468,6 +8469,11 @@ async function applyTreeChanges({
           await fs.rmdir(currentFilepath);
           break
         case 'mkdir':
+          // Don't mkdir through a symlinked leading path: a parent component that
+          // is a symlink could otherwise redirect the directory creation outside
+          // the working tree. git applies the same check (it does not follow
+          // symlinks here) — see checkout.
+          await assertNoSymlinkInLeadingPath(fs, dir, op.filepath);
           await fs.mkdir(currentFilepath);
           break
         case 'rm':
@@ -8480,6 +8486,10 @@ async function applyTreeChanges({
               currentFilepath.startsWith(removedDir)
             )
           ) {
+            // Don't write through a symlinked leading path (see checkout): a
+            // parent component that is a symlink could redirect the write to a
+            // location outside the working tree.
+            await assertNoSymlinkInLeadingPath(fs, dir, op.filepath);
             const { object } = await _readObject({
               fs,
               cache: {},
@@ -9488,8 +9498,8 @@ function filterCapabilities(server, client) {
 
 const pkg = {
   name: 'isomorphic-git',
-  version: '1.38.7',
-  agent: 'git/isomorphic-git@1.38.7',
+  version: '1.38.8',
+  agent: 'git/isomorphic-git@1.38.8',
 };
 
 class FIFO {

package/index.js

@@ -6877,23 +6877,11 @@ async function branch({
   }
 }
 
-const worthWalking = (filepath, root) => {
-  if (filepath === '.' || root == null || root.length === 0 || root === '.') {
-    return true
-  }
-  if (root.length >= filepath.length) {
-    return root.startsWith(filepath)
-  } else {
-    return filepath.startsWith(root)
-  }
-};
-
-// @ts-check
-
 /**
- * Throw if any leading directory component of `fullpath` (relative to `dir`) is a symbolic
- * link. git does not follow symlinks in the leading path when writing working-tree files;
- * matching that avoids writing through a symlinked parent into a location outside `dir`.
+ * Refuse to materialize a working-tree entry whose parent path traverses a
+ * symbolic link. A leading component that is a symlink could otherwise redirect
+ * a write or mkdir outside the working tree. git applies the same check: it does
+ * not follow symlinks in the leading path when writing working-tree files.
  *
  * @param {import('../models/FileSystem.js').FileSystem} fs
  * @param {string} dir
@@ -6914,6 +6902,19 @@ async function assertNoSymlinkInLeadingPath(fs, dir, fullpath) {
   }
 }
 
+const worthWalking = (filepath, root) => {
+  if (filepath === '.' || root == null || root.length === 0 || root === '.') {
+    return true
+  }
+  if (root.length >= filepath.length) {
+    return root.startsWith(filepath)
+  } else {
+    return filepath.startsWith(root)
+  }
+};
+
+// @ts-check
+
 /**
  * @param {object} args
  * @param {import('../models/FileSystem.js').FileSystem} args.fs
@@ -8455,6 +8456,11 @@ async function applyTreeChanges({
           await fs.rmdir(currentFilepath);
           break
         case 'mkdir':
+          // Don't mkdir through a symlinked leading path: a parent component that
+          // is a symlink could otherwise redirect the directory creation outside
+          // the working tree. git applies the same check (it does not follow
+          // symlinks here) — see checkout.
+          await assertNoSymlinkInLeadingPath(fs, dir, op.filepath);
           await fs.mkdir(currentFilepath);
           break
         case 'rm':
@@ -8467,6 +8473,10 @@ async function applyTreeChanges({
               currentFilepath.startsWith(removedDir)
             )
           ) {
+            // Don't write through a symlinked leading path (see checkout): a
+            // parent component that is a symlink could redirect the write to a
+            // location outside the working tree.
+            await assertNoSymlinkInLeadingPath(fs, dir, op.filepath);
             const { object } = await _readObject({
               fs,
               cache: {},
@@ -9475,8 +9485,8 @@ function filterCapabilities(server, client) {
 
 const pkg = {
   name: 'isomorphic-git',
-  version: '1.38.7',
-  agent: 'git/isomorphic-git@1.38.7',
+  version: '1.38.8',
+  agent: 'git/isomorphic-git@1.38.8',
 };
 
 class FIFO {