lix/doc/manual/rl-next
Robert Hensing b7ce11c97d Disallow store path names that are . or .. (plus opt. -)
As discussed in the maintainer meeting on 2024-01-29.

Mainly this is to avoid a situation where the name is parsed and
treated as a file name, mostly to protect users.
.-* and ..-* are also considered invalid because they might strip
on that separator to remove versions. Doesn't really work, but that's
what we decided, and I won't argue with it, because .-* probably
doesn't seem to have a real world application anyway.
We do still permit a 1-character name that's just "-", which still
poses a similar risk in such a situation. We can't start disallowing
trailing -, because a non-zero number of users will need it and we've
seen how annoying and painful such a change is.

What matters most is preventing a situation where . or .. can be
injected, and to just get this done.

(cherry picked from commit f1b4663805a9dbcb1ace64ec110092d17c9155e0)
Change-Id: I900a8509933cee662f888c3c76fa8986b0058839
2024-05-02 19:34:38 +02:00
..
better-errors-in-nix-repl.md Print top-level errors normally in nix repl 2024-04-09 08:34:40 -07:00
debugger-locals-for-let-expressions.md manual: fix release notes 2024-03-27 03:09:14 +00:00
debugger-on-trace.md Merge pull request #9914 from 9999years/debugger-on-trace 2024-03-09 10:17:26 -07:00
drop-vendored-toml11.md Stop vendoring toml11 2024-03-27 21:04:00 -04:00
drv-string-parse-hang.md Merge pull request #9673 from pennae/drv-parse-opts 2024-03-04 07:36:51 +01:00
dup-attr-errors.md build: replace changelog-d with local script 2024-03-27 03:09:14 +00:00
empty-search-regex.md manual: fix release notes 2024-03-27 03:09:14 +00:00
enter-debugger-more-reliably-in-let-and-calls.md Merge pull request #9917 from 9999years/enter-debugger-more-reliably 2024-03-09 03:37:35 -07:00
env-size-reduction.md Merge pull request #9658 from pennae/env-diet 2024-03-04 07:37:45 +01:00
eval-system.md Merge pull request #4093 from matthewbauer/eval-system 2024-03-04 07:21:01 +01:00
forbid-nested-debuggers.md Merge pull request #9920 from 9999years/forbid-nested-debuggers 2024-03-31 17:28:25 +00:00
formal-order.md normalize formal order on ExprLambda::show 2024-03-18 07:56:34 -06:00
inherit-error-positions.md report inherit attr errors at the duplicate name 2024-03-18 16:12:45 +01:00
inherit-from-by-need.md evaluate inherit (from) exprs only once per directive 2024-03-10 03:18:32 -06:00
leading-period.md Disallow store path names that are . or .. (plus opt. -) 2024-05-02 19:34:38 +02:00
new-assertions.md build: enable libstdc++ assertions 2024-04-08 15:40:12 -07:00
nix-env-json-drv-path.md Merge pull request #9573 from hercules-ci/rl-next-md-frontmatter 2024-03-04 07:12:09 +01:00
nix-flake-check-logs-actions.md Add release notes 2024-03-07 12:29:57 -08:00
nix-flake-update-ux.md manual: fix release notes 2024-03-27 03:09:14 +00:00
nixversion-fake.md build: replace changelog-d with local script 2024-03-27 03:09:14 +00:00
no-cache-eval-errors.md always re-eval cached failures 2024-04-06 04:35:25 +00:00
print-value-in-coercion-error.md manual: fix release notes 2024-03-27 03:09:14 +00:00
print-value-in-type-error.md manual: fix release notes 2024-03-27 03:09:14 +00:00
reduce-debugger-clutter.md Merge pull request #9919 from 9999years/reduce-debugger-clutter 2024-03-04 08:52:57 +01:00
repl-doc-command.md repl: improve :doc builtin repl command to support lambdas. 2024-04-03 13:47:22 -06:00
repl-overlays.md Add repl-overlays 2024-04-08 17:11:47 -07:00
short-expr-flag.md build: replace changelog-d with local script 2024-03-27 03:09:14 +00:00
source-location-in-while-evaluating-attribute.md Merge pull request #9915 from 9999years/evaluating-attribute-position 2024-03-04 09:25:17 +01:00
source-positions-in-errors.md Merge pull request #9753 from 9999years/print-value-on-type-error 2024-03-09 00:05:41 -07:00
stack-overflow-segfaults.md Merge pull request #9617 from 9999years/stack-overflow-segfault 2024-03-04 07:35:20 +01:00
upgrade-nix-override.md nix3-upgrade-nix: allow manually specifying new nix 2024-04-29 01:19:21 +00:00
upgrade-nix-profile-compat.md fix nix upgrade-nix on new-style profiles 2024-04-29 01:19:21 +00:00
upstart-removal.md build: replace changelog-d with local script 2024-03-27 03:09:14 +00:00
with-error-reporting.md Merge pull request #9753 from 9999years/print-value-on-type-error 2024-03-09 00:05:41 -07:00