69645389e9
The API permits path traversal characters like '../' to be passed down to the template finder. Detect these requests and cause them to fail with a 500 response code. |
||
|---|---|---|
| .. | ||
| api | ||
| backup | ||
| banzai | ||
| bitbucket | ||
| bitbucket_server | ||
| constraints | ||
| container_registry | ||
| gitaly | ||
| gitlab | ||
| google_api | ||
| json_web_token | ||
| mattermost | ||
| microsoft_teams | ||
| object_storage | ||
| omni_auth/strategies | ||
| quality | ||
| rspec_flaky | ||
| system_check | ||
| after_commit_queue_spec.rb | ||
| event_filter_spec.rb | ||
| expand_variables_spec.rb | ||
| extracts_path_spec.rb | ||
| feature_spec.rb | ||
| file_size_validator_spec.rb | ||
| forever_spec.rb | ||
| gitlab_spec.rb | ||
| milestone_array_spec.rb | ||
| system_check_spec.rb | ||
| uploaded_file_spec.rb | ||