Andrew Grieve created CB-7183:
---------------------------------
Summary: Prevent plugins from modifying files outside of the
project
Key: CB-7183
URL: https://issues.apache.org/jira/browse/CB-7183
Project: Apache Cordova
Issue Type: Bug
Components: CordovaLib
Reporter: Andrew Grieve
Right now this is possible:
{code}
<source-file src="src/someScript.js"
target-dir="../../../../../hooks/pre_package"/>
{code}
We should ensure that plugins are not able to touch files outside of the
project directory!
--
This message was sent by Atlassian JIRA
(v6.2#6252)