Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix alias_traversal #39

Merged
merged 1 commit into from Jan 27, 2018
Merged

Fix alias_traversal #39

merged 1 commit into from Jan 27, 2018

Conversation

maniackcrudelis
Copy link

@maniackcrudelis maniackcrudelis commented Jan 4, 2018

Problem

Solution

  • Fix the issue by adding a rewrite and a final slash on location.

PR Status

Work finished. Package_check, basic tests and upgrade from last version OK.
Could be reviewed and tested.

Validation


Minor decision

  • Upgrade previous version : Verified by the CI.
  • Code review : JimboJoe
  • Approval (LGTM) : JimboJoe
  • Approval (LGTM) :
  • CI succeeded : Build Status
    When the PR is mark as ready to merge, you have to wait for 3 days before really merge it.

Copy link

@JimboJoe JimboJoe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM though not tested

@@ -0,0 +1,51 @@
#!/bin/bash

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We could depend on YunoHost 2.7.7 and spare the creation of this file.

@@ -8,6 +8,7 @@

source _common.sh
source /usr/share/yunohost/helpers
source _sed

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

... and if we depend on 2.7.7, we could maybe have a much easier script... ? 😉

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes we could, but as a security fix, it would be better to merge that before. Then work on a refactoring of the change_url script.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed!

Copy link

@JimboJoe JimboJoe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM and code review OK 👍

@JimboJoe
Copy link

Only need one small LGTM... maybe @frju365 ?

@maniackcrudelis maniackcrudelis merged commit 2b47201 into update_package Jan 27, 2018
@maniackcrudelis maniackcrudelis deleted the Fix_alias_traversal branch January 27, 2018 15:24
@maniackcrudelis maniackcrudelis mentioned this pull request Feb 11, 2018
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants