Jason Ginchereau 6e8379ea7a Implement PAX header validation and path safety checks in tar extraction ...

- Added a new test suite for parser-differential bypass detection in tar archives.
- Introduced length-correct PAX extended-header re-parsing to catch discrepancies between node-tar and system tar.
- Enhanced the listAndValidate function to return approved names alongside violations for better extraction control.
- Implemented checks for unsafe characters and glob metacharacters in entry paths.
- Updated the tar extraction logic to utilize an allow-list for approved entries when path validation is in error mode.
- Added utility functions for writing temporary allow-list files for system tar extraction.

2026-06-19 09:17:41 -10:00

..

__fixtures__

@actions/cache: convert to an ESM module (#2275)

2026-01-29 14:23:32 -05:00

cache.test.ts

Fix v1 cache service to only check ACTIONS_CACHE_URL

2025-07-14 13:39:13 +00:00

cacheHttpClient.test.ts

Formatting and stylistic cleanup

2024-11-14 03:22:03 -08:00

cacheTwirpClient.test.ts

tests & releases

2026-01-16 09:44:57 +00:00

cacheUtils.test.ts

Linter fixes and remove unnecessary dependency

2024-11-21 04:05:04 -08:00

config.test.ts

Linter fixes and remove unnecessary dependency

2024-11-21 04:05:04 -08:00

create-cache-files.sh

React to feedback

2020-05-15 12:26:42 -04:00

downloadUtils.test.ts

Re-enable the audit tools step and update dependencies (#815)

2021-05-21 09:19:40 -04:00

listAndValidate.test.ts

Implement PAX header validation and path safety checks in tar extraction

2026-06-19 09:17:41 -10:00

options.test.ts

feat: optional path validation during cache restore

2026-06-17 14:39:14 -10:00

pathValidation.test.ts

Fix lint issues

2026-06-17 14:39:18 -10:00

pax-reparse.test.ts

Implement PAX header validation and path safety checks in tar extraction

2026-06-19 09:17:41 -10:00

requestUtils.test.ts

Added cacheSize in ReserveCache API request (#1044)

2022-04-04 16:21:58 +05:30

restore-cache.mjs

@actions/cache: convert to an ESM module (#2275)

2026-01-29 14:23:32 -05:00

restoreCache.test.ts

feat: optional path validation during cache restore

2026-06-17 14:39:14 -10:00

restoreCacheV2.test.ts

feat: optional path validation during cache restore

2026-06-17 14:39:14 -10:00

save-cache.mjs

@actions/cache: convert to an ESM module (#2275)

2026-01-29 14:23:32 -05:00

saveCache.test.ts

Adit fix, address copilot comments

2026-06-11 17:17:55 -07:00

saveCacheV2.test.ts

Adit fix, address copilot comments

2026-06-11 17:17:55 -07:00

tar.test.ts

Don't set the MSYS env var globally (#1329)

2023-02-08 10:58:25 +05:30

tarPathValidation.test.ts

Implement PAX header validation and path safety checks in tar extraction

2026-06-19 09:17:41 -10:00

tarPathValidationAttacks.test.ts

Implement PAX header validation and path safety checks in tar extraction

2026-06-19 09:17:41 -10:00

uploadUtils.test.ts

fix(cache): replace @azure/ms-rest-js with @azure/core-rest-pipeline

2025-12-10 11:23:06 +00:00

util.test.ts

add encoding back with extra tests

2025-03-14 06:38:57 -07:00

verify-cache-files.sh

React to feedback

2020-05-15 12:26:42 -04:00