climate-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Michael Anderson (JIRA)" <j...@apache.org>
Subject [jira] [Assigned] (CLIMATE-22) Local file upload path input doesn't function correctly when parts of the path are ignored by the backend
Date Sun, 04 Mar 2018 11:03:00 GMT

     [ https://issues.apache.org/jira/browse/CLIMATE-22?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Michael Anderson reassigned CLIMATE-22:
---------------------------------------

    Assignee: Michael Anderson  (was: Michael Joyce)

> Local file upload path input doesn't function correctly when parts of the path are ignored
by the backend
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: CLIMATE-22
>                 URL: https://issues.apache.org/jira/browse/CLIMATE-22
>             Project: Apache Open Climate Workbench
>          Issue Type: Bug
>          Components: webapp
>    Affects Versions: 0.2-incubating
>            Reporter: Michael Joyce
>            Assignee: Michael Anderson
>            Priority: Major
>             Fix For: 1.3.0
>
>
> When selecting a local model file for "upload" to the UI, the user can input a few strings
that will be ignored/removed/modified by the backend. Currently "/../" and "/./" are both
truncated down to "/" either for security ("/../") or convenience ("/./"). When the user enters
these into the input box the results are filtered improperly since the results don't share
a common prefix with the input text.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message