jif 929e2b9c1d
Harden MCP OAuth fallback credential writes ( #39611 ) ...
## Why
The fallback file contains OAuth credentials, so it must be private from the
moment it is created and writes must not follow links to another path.
## What changed
- Create the fallback file with mode `0600` on Unix before writing credentials.
- Reject symlinks and other non-regular files on Unix and Windows, including
Windows reparse points.
- Truncate and update an existing regular file through the validated file
handle, restoring private Unix permissions when needed.
## Testing
Added coverage for creation under a permissive umask, updates through an
existing hard link, permission restoration, and symlink rejection.
GitOrigin-RevId: d3e4be52e8f4cebb66c59d496a7f77a952a2d0d9
2026-08-20 06:17:48 +00:00
2026-08-19 15:55:38 +00:00
2026-08-20 06:13:28 +00:00
2026-08-18 23:05:52 +00:00
2026-08-18 23:47:00 +00:00
2026-08-17 04:01:37 +00:00
2026-08-16 06:48:59 +00:00
2026-08-10 18:44:58 +00:00
2026-08-10 01:39:55 +00:00
2026-08-18 23:47:00 +00:00
2026-08-11 03:39:02 +00:00
2026-08-14 05:03:39 +00:00
2026-08-17 22:37:14 +00:00
2026-08-20 05:24:56 +00:00
2026-08-18 23:47:00 +00:00
2026-08-13 19:35:22 +00:00
2026-08-14 20:42:35 +00:00
2026-08-15 21:26:28 +00:00
2026-08-14 22:40:19 +00:00
2026-08-19 15:37:26 +00:00
2026-08-18 18:41:40 +00:00
2026-08-18 23:47:00 +00:00
2026-08-13 23:13:37 +00:00
2026-08-20 05:21:09 +00:00
2026-08-04 22:58:02 +00:00
2026-08-20 05:24:56 +00:00
2026-08-07 00:23:38 +00:00
2026-08-03 11:39:51 +00:00
2026-08-20 06:13:28 +00:00
2026-08-19 01:26:16 +00:00
2026-08-20 05:24:56 +00:00
2026-08-07 11:30:17 +00:00
2026-08-13 00:00:16 +00:00
2026-08-18 23:05:52 +00:00
2026-08-18 21:30:45 +00:00
2026-08-17 21:49:30 +00:00
2026-08-17 04:37:50 +00:00
2026-08-19 11:59:23 +00:00
2026-08-19 01:06:12 +00:00
2026-08-19 09:01:23 +00:00
2026-08-18 21:46:18 +00:00
2026-08-17 21:49:30 +00:00
2026-08-10 15:50:53 +00:00
2026-08-18 12:37:41 +00:00
2026-08-18 23:23:23 +00:00
2026-08-17 00:09:44 +00:00
2026-08-10 22:12:14 +00:00
2026-08-20 05:03:49 +00:00
2026-08-19 00:28:52 +00:00
2026-08-17 10:01:59 +00:00
2026-08-20 05:29:12 +00:00
2026-08-19 04:46:58 +00:00
2026-08-19 04:46:58 +00:00
2026-08-17 23:08:26 +00:00
2026-08-18 21:30:45 +00:00
2026-08-17 19:06:53 +00:00
2026-08-10 14:25:13 +00:00
2026-08-17 21:49:30 +00:00
2026-08-19 01:26:16 +00:00
2026-08-15 01:34:33 +00:00
2026-08-20 06:17:48 +00:00
2026-08-18 23:05:52 +00:00
2026-08-06 03:11:42 +00:00
2026-08-20 05:36:23 +00:00
2026-08-10 15:43:10 +00:00
2026-08-20 06:03:25 +00:00
2026-08-08 16:58:26 +00:00
2026-08-20 06:10:03 +00:00
2026-08-20 05:16:59 +00:00
2026-08-04 03:49:53 +00:00
2026-08-18 00:45:00 +00:00
2026-08-19 16:20:21 +00:00
2026-08-14 05:49:33 +00:00
2026-08-20 05:54:19 +00:00
2026-08-20 05:10:57 +00:00
2026-08-18 21:56:54 +00:00
2026-08-15 14:31:04 +00:00
2026-08-20 06:17:48 +00:00
2026-08-19 11:59:23 +00:00
2026-08-18 22:00:25 +00:00
929e2b9c1d