Skip to content

Wings v1.11.11 does not respect the egg file denylist thoroughly #5042

@itsvic-dev

Description

@itsvic-dev

Current Behavior

  • Wings allows you to download and delete a denylisted file.
  • Wings does not allow you to copy, rename, edit or upload a denylisted file.
  • Wings allows you to overwrite a denylisted file by downloading it from a URL.
  • Wings does not impose any denylist restrictions on SFTP.

Expected Behavior

  • Wings should not allow you to do any operation on denylisted files over the REST API.
  • Wings should not allow you to do any operation on denylisted files over SFTP.

Steps to Reproduce

  1. Edit an egg to add a file to its denylist.
  2. Try to download the denylisted file - it's allowed.
  3. Try to rename or copy the denylisted file - it's blocked.
  4. Try to delete the denylisted file - it's allowed.
  5. Try doing anything to the file over SFTP - it's allowed.

Panel Version

Not applicable

Wings Version

1.11.11

Games and/or Eggs Affected

No response

Docker Image

No response

Error Logs

No response

Is there an existing issue for this?

  • I have searched the existing issues before opening this issue.
  • I have provided all relevant details, including the specific game and Docker images I am using if this issue is related to running a server.
  • I have checked in the Discord server and believe this is a bug with the software, and not a configuration issue with my specific system.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething that's not working as it's intended to be.

    Type

    No type

    Projects

    Status

    📋 Backlog

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions