This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/commons-text.git
commit 124222e043ca6f5b19f465c80d0cebae8d87f8b1 Author: Gary Gregory <[email protected]> AuthorDate: Mon Jun 1 12:25:44 2026 -0400 Fix path fence bypass for relative paths with leading ".." #745. --- src/changes/changes.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/src/changes/changes.xml b/src/changes/changes.xml index 34adc87c..5274362c 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -52,6 +52,7 @@ The <action> type attribute can be add,update,fix,remove. <action type="fix" dev="ggregory" due-to="Omkhar Arasaratnam, Gary Gregory">FormattableUtils.append re-parses literal output as format string (#743).</action> <action type="fix" dev="ggregory" due-to="Omkhar Arasaratnam, Gary Gregory">StrBuilder.replaceImpl() shrink-branch leaves residual chars in buffer tail.</action> <action type="fix" dev="ggregory" due-to="Omkhar Arasaratnam, Gary Gregory">StrBuilder.setLength() shrink-branch leaves residual chars in buffer tail.</action> + <action type="fix" dev="ggregory" due-to="Javid Khan, Gary Gregory">Fix path fence bypass for relative paths with leading ".." #745.</action> <!-- ADD --> <!-- UPDATE --> <action type="update" dev="ggregory" due-to="Gary Gregory">Bump org.apache.commons:commons-parent from 93 to 100.</action>
