Thanks,

No risk, the plugin creates these files in the workspace hardcoded, an than 
copy them over to the master.

-----Original Message-----
From: [email protected] <[email protected]> On Behalf 
Of Jesse Glick
Sent: יום ו 13 נובמבר 2020 00:03
To: Jenkins Dev <[email protected]>
Subject: Re: Writing from Slave To Master

On Thu, Nov 12, 2020 at 4:41 PM Tal Yanai <[email protected]> wrote:
>  FilePath masterDirectory = new FilePath(new File(buildDir + 
> File.separator + fileName));

Just be careful. If `fileName` is user-controlled, this is an easy attack 
vector (pass `../../../secrets/master.key` for example).

--
You received this message because you are subscribed to a topic in the Google 
Groups "Jenkins Developers" group.
To unsubscribe from this topic, visit 
https://groups.google.com/d/topic/jenkinsci-dev/I0WuyxdA9Nc/unsubscribe.
To unsubscribe from this group and all its topics, send an email to 
[email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CANfRfr2iBozf8BskdL-nvkq_ACT1r0wJ9N9MQre6hKc6qKDDnw%40mail.gmail.com.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/004001d6b942%24049a27c0%240dce7740%24%40yanai.org.il.

Reply via email to