gitlab-org--gitlab-foss/spec/lib/gitlab/template
Nick Thomas 69645389e9
Prevent a path traversal attack on global file templates
The API permits path traversal characters like '../' to be passed down
to the template finder. Detect these requests and cause them to fail
with a 500 response code.
2018-12-05 14:12:35 +00:00
..
finders
gitignore_template_spec.rb
gitlab_ci_yml_template_spec.rb
issue_template_spec.rb
merge_request_template_spec.rb