[Issue 3420] Impossible to specify -J path for subdirectories

[d-bugmail at puremagic.com]

http://d.puremagic.com/issues/show_bug.cgi?id=3420



--- Comment #5 from Leandro Lucarella <llucax at gmail.com> 2009-11-30 14:10:12 PST ---
(In reply to comment #4)
> Ah, I see. This should be clarified in the documentation... Also, doesn't
> anyone think that this could be too constricting?

I do.

Maybe this can be changed to be a feature request. I really can't see how
allowing subdirectories can be a security risk, you only have to check that the
canonical name of the imported file is still in a subdirectory of an -J'ed
directory.

In POSIX you can use realpath(3) to get the canonical name of a file, then just
check if the imported canonical name starts with any -J directory canonical
name.

-- 
Configure issuemail: http://d.puremagic.com/issues/userprefs.cgi?tab=email
------- You are receiving this mail because: -------