You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@continuum.apache.org by "Jason van Zyl (JIRA)" <ji...@codehaus.org> on 2005/06/13 07:40:41 UTC
[jira] Closed: (CONTINUUM-158) shell and ant scripts should not be configurable by the web interface
[ http://jira.codehaus.org/browse/CONTINUUM-158?page=all ]
Jason van Zyl closed CONTINUUM-158:
-----------------------------------
Resolution: Fixed
The executable must be in the path or in the working directory. So there's no more security concern here.
> shell and ant scripts should not be configurable by the web interface
> ---------------------------------------------------------------------
>
> Key: CONTINUUM-158
> URL: http://jira.codehaus.org/browse/CONTINUUM-158
> Project: Continuum
> Type: Improvement
> Components: continuum-web
> Reporter: Brett Porter
> Priority: Critical
> Fix For: 1.0-alpha-3
>
>
> I think this is a security issue if absolute paths are allowed...
> We should make all the scripts be relative to the checkout, or configured in the server configuration and selectable from a dropdown.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira