supabase / supabase / 20768403685 / 1 – studio-tests

68%

master: 68%

push

github

fix: sanitize file paths with parent directory references in edge function downloads (#41745)

Refactored downloadFunction to safely handle files with ../ in their paths by detecting the deepest relative path and creating a normalized directory structure. This prevents path traversal vulnerabilities and ensures all files are safely contained within the zip archive.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>

674 of 778 branches covered (86.63%)

Branch coverage included in aggregate %.

2551 of 3948 relevant lines covered (64.61%)

122.68 hits per line