[go: up one dir, main page]

Skip to content

Repository Files API directory traversal

In the GitLab Terraform Provider we currently have an open issue that it sometimes is useful to use (maybe even only limited) directory traversal with the Repository Files API which currently leads a documented 400 error.

Are there any plans or would you be open to allow directory traversal within the Repository Files API, e.g.:

GET /api/v4/projects/63/repository/files/%2E%2Fa%2Ffoo%2Etxt?ref=main HTTP/1.1 to get ./foo.txt.

Of course something like ../foo.txt and other potentially dangerous paths would need to be prevented.

/cc @nagyv-gitlab could you please help me find the appropriate folks to help out here?