You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@continuum.apache.org by "Brett Porter (JIRA)" <ji...@codehaus.org> on 2005/05/26 07:06:21 UTC

[jira] Updated: (CONTINUUM-158) shell and ant scripts should not be configurable by the web interface

     [ http://jira.codehaus.org/browse/CONTINUUM-158?page=all ]

Brett Porter updated CONTINUUM-158:
-----------------------------------

    Description: 
I think this is a security issue if absolute paths are allowed...

We should make all the scripts be relative to the checkout, or configured in the server configuration and selectable from a dropdown.

  was:I think this is a security issue if absolute paths are allowed...


> shell and ant scripts should not be configurable by the web interface
> ---------------------------------------------------------------------
>
>          Key: CONTINUUM-158
>          URL: http://jira.codehaus.org/browse/CONTINUUM-158
>      Project: Continuum
>         Type: Improvement
>   Components: continuum-web
>     Reporter: Brett Porter
>     Priority: Critical
>      Fix For: 1.0-alpha-3

>
>
> I think this is a security issue if absolute paths are allowed...
> We should make all the scripts be relative to the checkout, or configured in the server configuration and selectable from a dropdown.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira