Albert S. bb0b2886e9 Fix embarassing, basic path traversal attack ... Fix the most embarassing kind of path traversal vulnerability imaginable for such a tool. You could simply run raou ../../../../tmp/evil_entry The C version contained various check on the config dir and its entries which would have prevented this attack. In this port, the checking functions were deemed unnecessary, as they did lots of redundant checks too. Unfortunately, I missed this trivial attack when I decided not to port them. At the plus side, I found this now myself while sleep-deprived, so there may be some hope for me after all. Also, you should not use some non-released software from some guys git ;-)		2020-09-14 19:44:08 +02:00
..
main.rs	Fix embarassing, basic path traversal attack	2020-09-14 19:44:08 +02:00