https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41651

--- Comment #24 from Robin Sheat <[email protected]> ---
Created attachment 207365
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=207365&action=edit
Bug 41651: (QA follow-up) Fix issues in plugin file copy

We're focusing on reliability and security here, the improvements
include:

- Escape regex metacharacters in path using \Q...\E to prevent
  regex injection issues
- Check copy() return value and collect errors, die if any
  copies fail to prevent silent partial installations
- Make basename filter more specific to only skip cpanfile and
  META.json/META.yml, not files containing "META" anywhere

Signed-off-by: Tadeusz „tadzik” Sośnierz <[email protected]>
Signed-off-by: Robin Sheat <[email protected]>

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to