Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: secure wrapper when paths contain utf-16 characters #8539

Merged
merged 9 commits into from
Mar 31, 2025

Conversation

ryan-willis
Copy link
Contributor

@ryan-willis ryan-willis commented Mar 27, 2025

initial solution for #8537

  • refactors the wrapper to support multi-byte unicode strings in paths, not just ANSI strings
  • supports spaces in paths, fixing an issue where shortcuts would not add/remove properly
  • adds build instructions to make this a bit easier to maintain in the future

@ryan-willis ryan-willis changed the title doc: add notes and build instructions for the wrapper fix: secure wrapper when paths contain utf-16 characters Mar 28, 2025
@ryan-willis ryan-willis force-pushed the doc/secure-wrapper branch 2 times, most recently from 66d0eb0 to 60dc988 Compare March 28, 2025 05:34
@notjaywu notjaywu requested a review from Copilot March 30, 2025 01:23
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR introduces a secure wrapper update that addresses vulnerabilities related to local search paths, specifically improving support for multi-byte unicode strings and paths with spaces.

  • Refactors the wrapper to support UTF-16 and multi-byte unicode in paths.
  • Fixes issues with shortcut operations by handling spaces in paths.
  • Adds build instructions and a clang-format rule for consistency.

Reviewed Changes

Copilot reviewed 2 out of 6 changed files in this pull request and generated 1 comment.

File Description
packages/insomnia/src/cpp/README.md Adds documentation for building and using the secure wrapper.
.clang-format Introduces a ColumnLimit setting to enforce code formatting.
Files not reviewed (4)
  • build-secure-wrapper.sh: Language not supported
  • packages/insomnia/src/cpp/insomnia.cpp: Language not supported
  • packages/insomnia/src/cpp/manifest.txt: Language not supported
  • packages/insomnia/src/cpp/resources.rc: Language not supported

@gatzjames gatzjames merged commit 8453c42 into develop Mar 31, 2025
9 checks passed
@gatzjames gatzjames deleted the doc/secure-wrapper branch March 31, 2025 17:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants