🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-vm69-h85x-8p85

Signed-off-by: Daniel <845765@qq.com>
2026-06-28 23:06:24 +00:00 · 2026-03-18 08:59:00 +08:00
parent 7781e6d97b
commit 501571c2d2
1 changed files with 3 additions and 0 deletions
--- a/kernel/util/path.go
+++ b/kernel/util/path.go
@@ -402,6 +402,9 @@ func IsSensitivePath(p string) bool {
 		"/lib",
 		"/srv",
 		"/tmp",
+		"/usr",
+		"/opt",
+		"/sbin",
 	}
 	for _, pre := range prefixes {
 		if strings.HasPrefix(toCheckPathLower, pre) {