Input validation
What does this mr do?
The file names which were passed as parameters weren't filtered. Closes: #624, #625.
Actions taken to fix bug
The methods which take said file names as parameters, now strip the '../' sequences from them, preventing access to unauthorized directories.
Does this MR meet the acceptance criteria?
-
I have added a changelog entry to reflect the significant changes I made and the bug I fixed. -
A test was created to test the bug. -
I have updated the documentation accordingly. -
I adhere to the style guide.
Edited by Marina Mădăraş
Merge request reports
Activity
added 7 commits
-
920c8500...e588b05f - 6 commits from branch
development - 95c7b4c9 - Merge branch 'development' of gitlab.ewi.tudelft.nl:eip/labrador/queue into input-validation
-
920c8500...e588b05f - 6 commits from branch
Policy violation(s) detected
Security and compliance scanners enforced by your organization have completed and identified that approvals are required due to one or more policy violations. Review the policy's rules in the MR widget and assign reviewers to proceed. Learn more about Security and Compliance policies.
mentioned in commit aada7ed6
Please register or sign in to reply