github/overleaf
1
0
Fork 0
mirror of https://github.com/overleaf/overleaf.git synced 2024-11-07 20:31:06 -05:00
Code Issues Projects Releases Packages Wiki Activity
A web-based collaborative LaTeX editor
7839 commits 3 branches 7 tags 201 MiB
JavaScript 65.1%
TypeScript 24.3%
Less 3.5%
Java 2.4%
SCSS 1.5%
Other 3.1%
Find a file
Simon Detheridge 56dcbefb5b Check for safe paths in all ProjectEntityHandler methods 
Some import mechanisms (for example, Github project import) call methods such as 'upsert*' directly, bypassing existing filename checks.

Added checks to all methods in ProjectEntityHandler that can create or rename a file.

bug: overleaf/sharelatex#908
Signed-off-by: Simon Detheridge <s@sd.ai>
2018-10-08 15:31:04 +01:00
services/web Check for safe paths in all ProjectEntityHandler methods 2018-10-08 15:31:04 +01:00