[Issue 989] Security hole

d-bugmail at puremagic.com d-bugmail at puremagic.com
Wed Feb 21 02:02:52 PST 2007


http://d.puremagic.com/issues/show_bug.cgi?id=989





------- Comment #2 from maxter at i.com.ua  2007-02-21 04:02 -------
Sorry, I just pushed the wrong button. The issue is that import() allows to
escape to -Jpath's parent directories if "../" is used in import file name. But
please don't disallow relative paths to subdirectories of -Jpath.


-- 



More information about the Digitalmars-d-bugs mailing list