| commit | 9fea5a9b229b6a114629c8787f614b2e9f1048fc | [log] [tgz] |
|---|---|---|
| author | cpu@chromium.org <cpu@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | Wed Jan 09 00:38:59 2013 |
| committer | cpu@chromium.org <cpu@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | Wed Jan 09 00:38:59 2013 |
| tree | a7c6e2a2fcf047e7951cf33e96047f0d511e8655 | |
| parent | c79ca045d5c7e03eb5d9bd7e6bd42fff6cf169fb [diff] |
Don't allow path traversal paths on the base file helpers This forces explicit normalization of paths and make path escaping security bugs much harder to exploit. See for example bug 167122 BUG=168890 TEST=included tests Review URL: https://codereview.chromium.org/11782005 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@175642 0039d316-1c4b-4281-b951-d872f2087c98