Skip to content

Commit

Permalink
fixup! remind why this is important
Browse files Browse the repository at this point in the history
Signed-off-by: Aditya Sirish <aditya@saky.in>
  • Loading branch information
adityasaky committed Feb 23, 2024
1 parent 5b6279e commit 461cfb6
Showing 1 changed file with 7 additions and 5 deletions.
12 changes: 7 additions & 5 deletions tuf-spec.md
Original file line number Diff line number Diff line change
Expand Up @@ -1098,11 +1098,13 @@ attributes are OPTIONAL, if used, exactly one of them should be set.
* a <a>PATHPATTERN</a> of `"foo/*"` matches `"foo/bar.tgz"` but not
`"foo/baz/bar.tgz"`, `"foo/bar/baz/bar.tgz"`, and so on.

Note: It is important to understand the functioning of path patterns to
avoid mistaken assumptions that can lead to a false sense of security. For
example, an assumption that `"foo/*"` applies recursively to all files in
subdirectories of `foo` in a terminating delegation could allow a subsequent
delegated role that should not be trusted to sign for a target.
Note: As each <PATHPATTERN> describes the paths that a delegated role is
trusted to provide, it is important to understand the functioning of path
patterns to avoid mistaken assumptions that can lead to a false sense of
security. For example, an assumption that `"foo/*"` applies recursively to
all files in subdirectories of `foo` in a terminating delegation could allow
a subsequent delegated role that should not be trusted to sign for a target
in a subdirectory of `foo`.



Expand Down

0 comments on commit 461cfb6

Please sign in to comment.