0 0 37 Go

fix: Validate tenantID in store-gateway (#5194)

BlocksHandler now rejects tenant IDs containing path separators or
traversal components before using the value to build a filesystem path.

syncDirForUser now validates the tenantID again to avoid any accidental
path traversal.

Christian Simon committed 13d ago

dd5b8f9afdcba16fd51f1bfbb768510fa5cfbc27

Parent: cf730a8

Committed by GitHub <noreply@github.com> on 5/28/2026, 7:27:54 AM