psc-package
psc-package copied to clipboard
Directory name bug
We construct several directory and file paths using </>
. If a package set, package or tag name has path parts in its name such as ..
, then this allows psc-package
to create files outside the project directory. This is obviously a bug, and possibly a security issue, so we should disallow such filenames.
Interested in taking a stab at this. How about newtypes and smart constructors for each of those three things?
Yes I think so.
Is there anything more to do here, or has this been solved by the PR?