Vendir allows to use unsafe paths in configuration about vendir HOT 2 OPEN

In the community meeting, we agreed that the fix is to disallow paths outside the current working directory (CWD). Defining the CWD is important here. If I remember correctly, this is the logic (in the order of priority):

• if the --chdir argument is supplied, its value is CWD;
• if the vendir configuration file is on the disk, its location is CWD;
• if the vendir configuration is passed via stdin, the current directory ($PWD) is CWD.

@joaopapereira I'm not entirely sure about the last two points. Could you confirm or correct this? Are there more cases?

from vendir.

• if the vendir configuration file is on the disk, its location is CWD;

I assume that all paths will have to start in the vendir configuration file, so CWD is where that file is

• if the vendir configuration is passed via stdin, the current directory ($PWD) is CWD.

In this scenario, we have to assume that CWD is the current directory.

I think these are all the scenarios, @neil-hickey @cppforlife do you think we might have any other scenarios?

from vendir.