Opened 4 years ago
Last modified 4 years ago
#31983 closed Cleanup/optimization
Add security check for cache location — at Initial Version
| Reported by: | christa | Owned by: | nobody |
|---|---|---|---|
| Component: | Core (Cache system) | Version: | dev |
| Severity: | Normal | Keywords: | cache check |
| Cc: | Johannes Maron | Triage Stage: | Ready for checkin |
| Has patch: | yes | Needs documentation: | no |
| Needs tests: | no | Patch needs improvement: | no |
| Easy pickings: | yes | UI/UX: | no |
Description
Hi, I have been reported an issue to security team one month ago. And the final conclusion is to check whether filesystem cache's location is a sub directory of special location.
I wrote a check function and require a ticket to make a PR.
Note:
See TracTickets
for help on using tickets.