Michael Joyce created CLIMATE-14:
------------------------------------

             Summary: directory_helpers.py should prevent users from accessing 
arbitrary directories
                 Key: CLIMATE-14
                 URL: https://issues.apache.org/jira/browse/CLIMATE-14
             Project: Apache Open Climate Workbench
          Issue Type: Bug
          Components: rcmet
            Reporter: Michael Joyce
            Assignee: Michael Joyce


Currently the getDirInfo/ endpoint allows the user to pass any path they like 
and get information on its contents. This needs to be limited to prevent any 
security issues from arising. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to