[jira] [Commented] (KARAF-6090) kar extract should ignore path containing .. relative path

[ASF subversion and git services (JIRA)]

    [ 
https://issues.apache.org/jira/browse/KARAF-6090?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16746305#comment-16746305
 ] 

ASF subversion and git services commented on KARAF-6090:
--------------------------------------------------------

Commit ac6874fc66e9111d5c9c06e04c37f75c509aeb8a in karaf's branch 
refs/heads/master from Colm O hEigeartaigh
[ https://gitbox.apache.org/repos/asf?p=karaf.git;h=ac6874f ]

KARAF-6090 - Also check the URL encoded form of ".."


> kar extract should ignore path containing .. relative path
> ----------------------------------------------------------
>
>                 Key: KARAF-6090
>                 URL: https://issues.apache.org/jira/browse/KARAF-6090
>             Project: Karaf
>          Issue Type: Improvement
>          Components: cave, karaf
>            Reporter: Jean-Baptiste Onofré
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>             Fix For: 4.1.8, 4.2.3, cave-4.1.2
>
>
> For security reason, kar extract (or explode in Cave deployer) should ignore 
> inner path containing {{..}} relative.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)