Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-04-21 13:37:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 91
fleet/ee
History
Carlo 37ee10e1a2 Scope package identifier validation to template substitution (#41028) 
Fixes #41009

## Summary

- Scope `ValidatePackageIdentifiers` to only run when `$PACKAGE_ID` or
`$UPGRADE_CODE` template variables are present in the uninstall script
  - Move `dmg`/`zip` early return before validation
- Switch from ASCII allowlist to shell metacharacter denylist, allowing
legitimate non-ASCII product names (e.g., `®`, parens) while still
blocking injection characters

  ## Test plan

- [x] Added unit tests for conditional validation (non-ASCII IDs
with/without template vars, dmg/zip bypass, upgrade code scoping)
  - [x] Existing input tests still pass
  - [x] Winget ingester tests unaffected

---------

Co-authored-by: Ian Littman <iansltx@gmail.com>
2026-03-05 16:51:54 -06:00
..
bulk-operations-dashboard Bump axios from 1.8.2 to 1.12.0 in /ee/bulk-operations-dashboard (#32904) 2025-09-15 10:15:37 -05:00
cis Fix formatting of policy name in YAML file (#39153) 2026-02-02 10:44:34 -06:00
fleetctl Add govet's nilness and golangci-lint nilnesserr (#33359) 2025-09-23 17:55:50 -03:00
fleetd-chrome Update chrome extension README (#38945) 2026-01-28 17:45:02 -06:00
maintained-apps Improved validation for packages (#40407) 2026-02-27 12:36:50 -06:00
orbit/pkg Host identity cert renewal: added IANA number and jitter (#31579) 2025-08-07 08:24:47 +02:00
server Scope package identifier validation to template substitution (#41028) 2026-03-05 16:51:54 -06:00
tools Bump lodash from 4.17.21 to 4.17.23 in /ee/tools/license (#38615) 2026-01-27 13:01:46 -06:00
vulnerability-dashboard Vulnerability dashboard: Update result name in MySQL query. (#35368) 2025-11-07 14:38:17 -06:00
LICENSE Introduce ee directory and license (#460) 2021-03-12 15:20:50 -08:00
README.md Add note about ee license in ee directory (#11252) 2023-04-21 14:55:38 -07:00

README.md

Welcome to the "source available" section of the Fleet codebase. Please note files and functionality under this directory are covered by the Fleet EE License, and require a valid Fleet subscription for production use. See the full license for details.