gitlab-org--gitlab-foss/lib/gitlab/template
Nick Thomas 69645389e9
Prevent a path traversal attack on global file templates
The API permits path traversal characters like '../' to be passed down
to the template finder. Detect these requests and cause them to fail
with a 500 response code.
2018-12-05 14:12:35 +00:00
..
finders Prevent a path traversal attack on global file templates 2018-12-05 14:12:35 +00:00
base_template.rb
dockerfile_template.rb
gitignore_template.rb
gitlab_ci_yml_template.rb
issue_template.rb
merge_request_template.rb