0
0
Fork 0
mirror of https://github.com/go-gitea/gitea synced 2024-12-23 03:24:19 +01:00
gitea/modules/options
JakobDev a12f575737
Clean Path in Options (#23006)
At the Moment it is possible to read files in another Directory as
supposed using the Options functions. e.g.
`options.Gitignore("../label/Default) `. This was discovered while
working on #22783, which exposes `options.Gitignore()` through the
public API. At the moment, this is not a security problem, as this
function is only used internal, but I thought it would be a good idea to
make a PR to fix this for all types of Options files, not only
Gitignore, to make it safe for the further. This PR should be merged
before the linked PR.

---------

Co-authored-by: Jason Song <i@wolfogre.com>
2023-03-08 15:07:58 +08:00
..
base.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
dynamic.go Clean Path in Options (#23006) 2023-03-08 15:07:58 +08:00
options.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
options_bindata.go Implement FSFE REUSE for golang files (#21840) 2022-11-27 18:20:29 +00:00
repo.go Add loading yaml label template files (#22976) 2023-03-02 01:44:23 +02:00
static.go Clean Path in Options (#23006) 2023-03-08 15:07:58 +08:00