You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@climate.apache.org by "Michael Joyce (JIRA)" <ji...@apache.org> on 2013/05/09 22:29:16 UTC

[jira] [Created] (CLIMATE-14) directory_helpers.py should prevent users from accessing arbitrary directories

Michael Joyce created CLIMATE-14:
------------------------------------

             Summary: directory_helpers.py should prevent users from accessing arbitrary directories
                 Key: CLIMATE-14
                 URL: https://issues.apache.org/jira/browse/CLIMATE-14
             Project: Apache Open Climate Workbench
          Issue Type: Bug
          Components: rcmet
            Reporter: Michael Joyce
            Assignee: Michael Joyce


Currently the getDirInfo/ endpoint allows the user to pass any path they like and get information on its contents. This needs to be limited to prevent any security issues from arising. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira