gitlab-org--gitlab-foss/lib/gitlab/template
Nick Thomas 69645389e9
Prevent a path traversal attack on global file templates
The API permits path traversal characters like '../' to be passed down
to the template finder. Detect these requests and cause them to fail
with a 500 response code.
2018-12-05 14:12:35 +00:00
..
finders Prevent a path traversal attack on global file templates 2018-12-05 14:12:35 +00:00
base_template.rb Enable even more frozen string for lib/gitlab 2018-11-19 18:24:22 -08:00
dockerfile_template.rb Enable even more frozen string for lib/gitlab 2018-11-19 18:24:22 -08:00
gitignore_template.rb Enable even more frozen string for lib/gitlab 2018-11-19 18:24:22 -08:00
gitlab_ci_yml_template.rb Enable even more frozen string for lib/gitlab 2018-11-19 18:24:22 -08:00
issue_template.rb Enable even more frozen string for lib/gitlab 2018-11-19 18:24:22 -08:00
merge_request_template.rb Enable even more frozen string for lib/gitlab 2018-11-19 18:24:22 -08:00