Free cookie consent management tool by TermsFeed Policy Generator

Opened 15 years ago

Closed 15 years ago

Last modified 14 years ago

#480 closed task (done)

Check if it is possible to open any file by giving relative paths in the PluginInfoAttribute

Reported by: gkronber Owned by: gkronber
Priority: medium Milestone: HeuristicLab 3.3.0
Component: General Version: 3.2
Keywords: Cc:

Description

Access to plugin files should be locked to the plugin directory, otherwise sandboxing that allows read/write access to any file given in the PluginInfoAttribute is not effective.

Example to demonstrate the problem: [PluginFile(Filename = "..\\..\\..\\..\\..\\TopSecretFile.txt", Filetype = PluginFileType.Assembly)]

Change History (4)

comment:1 Changed 15 years ago by gkronber

  • Status changed from new to assigned

comment:2 Changed 15 years ago by gkronber

  • Resolution set to fixed
  • Status changed from assigned to closed

Relative paths in plugin file attributes are not permitted anymore. This was changed in course with the plugin infrastructure refactoring #799.

comment:3 Changed 14 years ago by swagner

  • Milestone changed from Iteration 4 to Current

Milestone Iteration 4 deleted

comment:11 Changed 14 years ago by swagner

  • Milestone changed from Current to HeuristicLab 3.3.0

Milestone Current deleted

Note: See TracTickets for help on using tickets.