[
https://issues.apache.org/jira/browse/CLIMATE-14?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Michael Joyce resolved CLIMATE-14.
----------------------------------
Resolution: Fixed
Resolved in r1482546
> directory_helpers.py should prevent users from accessing arbitrary directories
> ------------------------------------------------------------------------------
>
> Key: CLIMATE-14
> URL: https://issues.apache.org/jira/browse/CLIMATE-14
> Project: Apache Open Climate Workbench
> Issue Type: Bug
> Components: rcmet
> Reporter: Michael Joyce
> Assignee: Michael Joyce
>
> Currently the getDirInfo/ endpoint allows the user to pass any path they like
> and get information on its contents. This needs to be limited to prevent any
> security issues from arising.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
