Jira (PUP-5885) Files with .. in the path anywhere cannot be used as file sources

[Matthaus Owens (JIRA)]

Title: Message Title

Matthaus Owens created an issue   Puppet / PUP-5885 Files with .. in the path anywhere cannot be used as file sources Issue Type: Bug Assignee: Unassigned Created: 2016/02/11 11:05 AM Priority: Normal Reporter: Matthaus Owens The following resource does not work in puppet currently: file {"/tmp/foo": ensure => present, source => 'puppet:///modules/foo..d/bar.txt', } However, the following does work: file {"/tmp/foo": ensure => present, source => 'puppet:///modules/foo.d/bar..txt', } It looks like this is due to the following line: lib/puppet/file_serving/configuration.rb:54: raise(ArgumentError, "Cannot find file: Invalid relative path '#{path}'") if path and path.split('/').include?('..') that was designed to prevent traversal attacks. Add Comment   This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.