kubernetes-sigs / azurefile-csi-driver / 32168262092

76%

master: 76%

Pull #3347

github

chore: validate inline volume request before performing cifs mount operation

This commit does the following changes:
1. If mounting through secret based authentication then mount options
   shouldn't contain sec, cruid and upcall_target.
2. Validate server option for inline volume request to avoid CIFS OOB read/write
3. Validate inlinevolume mount options should contain credentials, addr,ip..etc
   which leads to security concern

Signed-off-by: Mitta Sai Chaithanya <mittas@microsoft.com>

107 of 129 new or added lines in 1 file covered. (82.95%)

4130 of 5423 relevant lines covered (76.16%)

12.64 hits per line