orneryd / NornicDB / 30406060397

89%

Build Type

push

github

Committed by orneryd

Commit Message

fix(security): confine search persistence paths at source

Replace raw search persistence filesystem operations with rooted
capability helpers for directory creation, stat, rename, removal, and
directory reads.

Validate database names as single path components before constructing
or deleting DataDir/search artifacts, preventing traversal through
database-scoped persistence paths.

Harden APOC local file access with rooted operations and add regression
coverage for rooted path lifecycle and invalid database names.

Tests: go test ./pkg/security ./pkg/search ./pkg/cypher ./pkg/nornicdb

Coverage Stats

107 of 128 new or added lines in 9 files covered. (83.59%)

22 existing lines in 8 files now uncovered.

147958 of 166017 relevant lines covered (89.12%)

1.04 hits per line