This MacOS (APFS?) quirk was mentioned at the pub last night, and I still cannot believe this actually works when I tried it myself
@benjojo Friend of mine saw this, first thing he said is "this has to be exploitable".
... 😠of course this has to bypass something's path sanitisation
