Andrew Grieve created CB-7183:
---------------------------------

             Summary: Prevent plugins from modifying files outside of the 
project
                 Key: CB-7183
                 URL: https://issues.apache.org/jira/browse/CB-7183
             Project: Apache Cordova
          Issue Type: Bug
          Components: CordovaLib
            Reporter: Andrew Grieve


Right now this is possible:
{code}
<source-file src="src/someScript.js" 
target-dir="../../../../../hooks/pre_package"/>
{code}

We should ensure that plugins are not able to touch files outside of the 
project directory!



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to