Skip to content
GitLab
Menu
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Maarch
thirdPartyArchiving
Commits
9c097248
Verified
Commit
9c097248
authored
Dec 19, 2018
by
Alexandre Morin
Browse files
Deny symbolic link deposit
parent
93ce9e35
Changes
1
Hide whitespace changes
Inline
Side-by-side
bundle/medona/Controller/ArchiveTransfer.php
View file @
9c097248
...
...
@@ -205,6 +205,13 @@ class ArchiveTransfer extends abstractMessage
foreach
(
scandir
(
$zipFolder
)
as
$file
)
{
if
(
$file
!=
"."
&&
$file
!=
".."
)
{
if
(
unlink
(
$zipFolder
.
DIRECTORY_SEPARATOR
.
$file
))
{
$this
->
sendError
(
"202"
,
"The container file contains symbolic links"
);
$exception
=
\
laabs
::
newException
(
'medona/invalidMessageException'
,
"Invalid message"
,
400
);
$exception
->
errors
=
$this
->
errors
;
throw
$exception
;
}
rename
(
$zipFolder
.
DIRECTORY_SEPARATOR
.
$file
,
$messageDir
.
DIRECTORY_SEPARATOR
.
$file
);
if
(
pathinfo
(
$file
,
PATHINFO_FILENAME
)
==
pathinfo
(
$filename
,
PATHINFO_FILENAME
))
{
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment