Staging instance, all changes can be removed at any time

Skip to content

validate input paths in the CVS loader

Stefan Sperling requested to merge generated-differential-D6823-source into generated-differential-D6823-target

The CVS loader creates files on the local file system based on paths which were read from a local copy of a CVS repository or sent by a CVS server as part of its "cvs rlog" response.

Ensure that such paths will not be able to escape the temporary directory which stores checked out versions of files.

Migrated from D6823 (view on Phabricator)

Merge request reports