[darcs-devel] [issue2035] darcs accepts fake subpaths (relative paths outside of the repo)

Eric Kow bugs at darcs.net
Mon Jan 24 22:16:28 UTC 2011


Eric Kow <kowey at darcs.net> added the comment:

The following patch updated issue issue2035 with status=resolved;resolvedin=2.5.1 CURRENT

* Resolve issue2035: Catch malicious subpaths. 
Ignore-this: a6800c388c8c4390a92005496d6628e3
A longer-term fix would be to change our subpath representation
to be components based (eg. like pathlib)

----------
resolvedin:  -> 2.5.1 CURRENT
status: in-progress -> resolved

__________________________________
Darcs bug tracker <bugs at darcs.net>
<http://bugs.darcs.net/issue2035>
__________________________________


More information about the darcs-devel mailing list