PowerShell

0 Fork 0

mirror of https://github.com/aphrody-labs/PowerShell.git synced 2026-10-15 06:09:09 +00:00

Files

T

Aditya Patwardhan 0ab0c67b5d Merged PR 41447: Harden Copy-Item -FromSession (#171 )

Harden Copy-Item -FromSession (#171)

----
#### AI description  (iteration 1)
#### PR Classification
Security hardening to prevent path traversal vulnerabilities in the `Copy-Item -FromSession` cmdlet.

#### PR Summary
This PR adds validation to prevent path traversal attacks when copying files from remote sessions by checking for malicious characters and patterns in remote file/directory names and alternate data stream names.

- `FileSystemProvider.cs`: Added `CanRemoteNameCausePathTraversal()` method to detect path traversal characters (`\`, `/`, `:` on Windows) and special names (`.`, `..`) in remote-supplied names
- `FileSystemProvider.cs`: Integrated path traversal validation checks before processing remote directory names, file names, and alternate data stream names in copy operations
- `Copy-Item.Tests.ps1`: Added comprehensive test cases validating the path traversal detection logic with benign and malicious filename patterns
- `FileSystemProviderStrings.resx`: Added error messages for directory name, file name, and alternate data stream path traversal violations
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->

2026-09-01 22:42:17 +00:00

CimCmdlets

Replace the CIM class used for -Amended parameter test (#17884 )

2022-08-22 14:41:04 -07:00

Microsoft.PowerShell.Core

Fix how processor architecture is validated in Import-Module (#24265 ) (#24317 )

2024-09-20 12:42:16 -07:00

Microsoft.PowerShell.Diagnostics

Add some debugging to the transcript test for SilentlyContinue (#19770 )

2023-06-12 17:03:53 -07:00

Microsoft.Powershell.Host

Add some debugging to the transcript test for SilentlyContinue (#19770 )