6 Commits

Author	SHA1	Message	Date
Jarian Cottingham	5c23a347ad	Merge pull request 'fix: validate --output path to prevent arbitrary file write (#2)' (#14) from fix/issue-2 into main ... Reviewed-on: https://git.example.com/jarianc/NASAImageDownloader/pulls/14	2026-07-05 02:50:29 -05:00
Jarian Cottingham	69dfdce4f5	fix: validate --output path to prevent arbitrary file write (#2) ... - Block system-critical paths (/etc, /usr, /bin, /sbin, /boot, /dev, /proc, /sys, /) - Resolve path before validation to defeat symlink tricks - Exit with error message if blocked path detected	2026-07-05 07:43:52 +00:00
Jarian Cottingham	668f48897f	fix: sanitize nasa_id and filenames to prevent path traversal (#1) ... - Add sanitize_filename() to strip path separators and parent refs - Apply sanitization to nasa_id used in metadata filenames - Apply sanitization to image filenames derived from asset_href - Preserve raw nasa_id for API calls to avoid breaking asset lookup	2026-07-05 07:43:07 +00:00
Jarian Cottingham	3b0fea6379	4 hours instead of 2. Will expose a cli param for Max Run time later	2025-10-19 21:23:36 -05:00
Jarian Cottingham	687513725c	Adding output dir as script input	2025-09-10 23:39:31 -05:00
Jarian Cottingham	41d7a6848e	Downloader up and working	2025-09-10 23:27:33 -05:00