Opened 12 years ago

Closed 12 years ago

Last modified 11 years ago

#480 closed task (done)

Check if it is possible to open any file by giving relative paths in the PluginInfoAttribute

Reported by: gkronber Owned by: gkronber
Priority: medium Milestone: HeuristicLab 3.3.0
Component: General Version: 3.2
Keywords: Cc:

Description

Access to plugin files should be locked to the plugin directory, otherwise sandboxing that allows read/write access to any file given in the PluginInfoAttribute is not effective.

Example to demonstrate the problem: [PluginFile(Filename = "..\\..\\..\\..\\..\\TopSecretFile.txt", Filetype = PluginFileType.Assembly)]

Change History (4)

comment:1 Changed 12 years ago by gkronber

  • Status changed from new to assigned

comment:2 Changed 12 years ago by gkronber

  • Resolution set to fixed
  • Status changed from assigned to closed

Relative paths in plugin file attributes are not permitted anymore. This was changed in course with the plugin infrastructure refactoring #799.

comment:3 Changed 11 years ago by swagner

  • Milestone changed from Iteration 4 to Current

Milestone Iteration 4 deleted

comment:11 Changed 11 years ago by swagner

  • Milestone changed from Current to HeuristicLab 3.3.0

Milestone Current deleted

Note: See TracTickets for help on using tickets.