mathjax-rails icon indicating copy to clipboard operation
mathjax-rails copied to clipboard

Published 20 hours ago • verified publisher icon pmq20

was giveOutStaticFile checked for security vs downloading arbitrary files?

Open nruth opened this issue 10 years ago • 1 comments

in the rails api entry for send_file:

Be careful to sanitize the path parameter if it is coming from a web page. send_file(params[:path]) allows a malicious user to download any file on your server.

nruth avatar Oct 12 '14 20:10 nruth

No, it is not. After checking it out I came across the problem: Issue: https://github.com/pmq20/mathjax-rails/issues/26 (I've fixed it in a PR: https://github.com/pmq20/mathjax-rails/pull/25)

olivervbk avatar Jun 27 '17 19:06 olivervbk