Modify ↓

Ticket #19 (new defect)

Opened 4 years ago

Last modified 3 years ago

The kms protocol should not allow access to files outside of the module dir.

Reported by: bruno Owned by: bruno
Priority: minor Milestone: 0.5
Component: core/kauri-runtime Version: trunk
Keywords: Cc:

Description

From a user's point of view, it is expected that the kms protocol can only be used to access files located inside the module. We should verify that it is not possible to inject paths with "../" to access files on other locations on the system.

Attachments

Change History

comment:1 Changed 3 years ago by mpo

  • Milestone set to 0.5
View ↑

Add a comment

Modify Ticket

Action
as new
Author


E-mail address and user name can be saved in the Preferences.

Attachments ↑
 
Note: See TracTickets for help on using tickets.