[jira] [Commented] (KARAF-6393) Make sure extracted data from OBR source stays in destination directory

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KARAF-6393?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16919660#comment-16919660 ] 

ASF GitHub Bot commented on KARAF-6393:
---------------------------------------

coheigea commented on pull request #918: KARAF-6393 - Make sure extracted data from OBR source stays in destin…
URL: https://github.com/apache/karaf/pull/918
 
 
   …ation directory
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> Make sure extracted data from OBR source stays in destination directory
> -----------------------------------------------------------------------
>
>                 Key: KARAF-6393
>                 URL: https://issues.apache.org/jira/browse/KARAF-6393
>             Project: Karaf
>          Issue Type: Bug
>          Components: karaf
>            Reporter: Colm O hEigeartaigh
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>              Labels: obr
>             Fix For: 4.3.0, 4.2.7
>
>
> Make sure extracted data from OBR source stays in destination directory. ".." paths should not be allowed.



--
This message was sent by Atlassian Jira
(v8.3.2#803003)