Skip to content

rfc: path normalization and secure hardening#7799

Merged
erickguan merged 2 commits into
mainfrom
rfc-path
Jun 19, 2026
Merged

rfc: path normalization and secure hardening#7799
erickguan merged 2 commits into
mainfrom
rfc-path

Conversation

@erickguan

Copy link
Copy Markdown
Member

Which issue does this PR close?

Closes #4101, #6577.

Rationale for this change

To improve security and clarify behaviors.

What changes are included in this PR?

Add RFC proposing to remove .trim() from normalize_path so that whitespace within path components is preserved. The current behavior silently rewrites paths with leading/trailing whitespace to different objects, violating the documented API contract.

Are there any user-facing changes?

Yes, path normalization affects most users, services and bindings.

AI Usage Statement

Claude Opus 4.6 made research and a draft.

Add RFC proposing to remove `.trim()` from `normalize_path` so that
whitespace within path components is preserved. The current behavior
silently rewrites paths with leading/trailing whitespace to different
objects, violating the documented API contract.
@erickguan erickguan requested a review from TennyZhuang June 18, 2026 16:03
@erickguan erickguan requested a review from Xuanwo as a code owner June 18, 2026 16:03
@dosubot dosubot Bot added size:L This PR changes 100-499 lines, ignoring generated files. releases-note/docs The PR modifies docs related content or has a title that begins with "docs" labels Jun 18, 2026

@Xuanwo Xuanwo left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Love this change

@dosubot dosubot Bot added the lgtm This PR has been approved by a maintainer label Jun 19, 2026
@Xuanwo

Xuanwo commented Jun 19, 2026

Copy link
Copy Markdown
Member

Need to fix the typos

@erickguan erickguan merged commit 393abb0 into main Jun 19, 2026
123 of 124 checks passed
@erickguan erickguan deleted the rfc-path branch June 19, 2026 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

lgtm This PR has been approved by a maintainer releases-note/docs The PR modifies docs related content or has a title that begins with "docs" size:L This PR changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Make opendal's path normalization logic more clear in public API

2 participants