agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-05-26 18:51:50 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
59cf0aa3cbe4e0d511d6dddcab76cfad2b6730d3
overleaf-cep/services/web/app/coffee/Features/Project/ProjectEntityUpdateHandler.coffee
Simon Detheridge 56dcbefb5b Check for safe paths in all ProjectEntityHandler methods 
Some import mechanisms (for example, Github project import) call methods such as 'upsert*' directly, bypassing existing filename checks.

Added checks to all methods in ProjectEntityHandler that can create or rename a file.

bug: overleaf/sharelatex#908
Signed-off-by: Simon Detheridge <s@sd.ai>
2018-10-08 15:31:04 +01:00

26 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink