SwissDataScienceCenter / renku-data-services / 21900755919

89%

push

github

feat: use allow list for rclone (#1202)

Update rclone validation to use an allow list system:
* All storage types are listed and are explicitly allowed or blocked
* For all allowed storage types, all options are marked as allowed or blocked

This update also blocks potentially unsafe options (referring to a local file or a potential arbitrary command).

Tests in `test/components/renku_data_services/storage/test_rclone.py` are designed to help maintain the configuration of allowed storage types and storage options.

40 of 42 new or added lines in 4 files covered. (95.24%)

23584 of 26486 relevant lines covered (89.04%)

1.55 hits per line