The API permits path traversal characters like '../' to be passed down to the template finder. Detect these requests and cause them to fail with a 500 response code. |
||
|---|---|---|
| .. | ||
| base_template_finder.rb | ||
| global_template_finder.rb | ||
| repo_template_finder.rb | ||
The API permits path traversal characters like '../' to be passed down to the template finder. Detect these requests and cause them to fail with a 500 response code. |
||
|---|---|---|
| .. | ||
| base_template_finder.rb | ||
| global_template_finder.rb | ||
| repo_template_finder.rb | ||