Change Details

The Docker registry allows to use /foo or foo as container name. This is a dubious comfort feature, but it would be nice if queries like %2Ftmp (/tmp URL encoded) doesn't have a lot of chance to succeed: even if the API is intended to expose metadata of a filesystem without any secret, it could theorically be deployed into environment where filesystem can expose secrets.

The Docker registry allows to use /foo or foo as container name. This is a dubious comfort feature, but it would be nice if queries like %2Ftmp (/tmp URL encoded) doesn't have a lot of chance to succeed: even if the API is intended to expose metadata of a filesystem without any secret, it could theoretically be deployed into environment where filesystem can expose secrets.

The Docker registry allows to use /foo or foo as container name. This is a dubious comfort feature, but it would be nice if queries like %2Ftmp (/tmp URL encoded) doesn't have a lot of chance to succeed: even if the API is intended to expose metadata of a filesystem without any secret, it could theoretically be deployed into environment where filesystem can expose secrets.