Skip to content

Reject package requests with ? or # in the decoded path - #437

Merged
andrew merged 2 commits into
git-pkgs:mainfrom
pinguinfuss:reject-query-in-path
Oct 12, 2026
Merged

andrew merged 2 commits into
git-pkgs:mainfrom
pinguinfuss:reject-query-in-path

Let Composer archive downloads through the '?'/'#' guard: they resolv…

411b436
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 notice
Helm chart
succeeded Oct 11, 2026 in 7s