pptx704 a0d635ae5e Fix path traversal in template/snapshot names and network cleanup leaks ...

Add SafeName validator (allowlist regex) to reject directory traversal
in user-supplied template and snapshot names. Validated at both API
handlers (400 response) and sandbox manager (defense in depth).

Refactor CreateNetwork with rollback slice so partially created
resources (namespace, veth, routes, iptables rules) are cleaned up
on any error. Refactor RemoveNetwork to collect and return errors
instead of silently ignoring them.

2026-03-13 08:40:36 +06:00

..

allocator.go

Add host agent RPC server with sandbox lifecycle management

2026-03-10 03:54:53 +06:00

manager.go

Add host agent with VM lifecycle, TAP networking, and envd client

2026-03-10 00:06:47 +06:00

nat.go

Add host agent with VM lifecycle, TAP networking, and envd client

2026-03-10 00:06:47 +06:00

setup.go

Fix path traversal in template/snapshot names and network cleanup leaks

2026-03-13 08:40:36 +06:00