Get Any File (#484)

Eric Dziewa opened 1 decade ago

Due Date
2015-09-29

Works.

Not sure if allowing admin to leave tigase-server directory is a good idea ie. ../../../etc/passwd.

Daniel Wisnewski commented 1 decade ago

Andrzej, are we okay with allowing directory navigation with this command?
Andrzej Wójcik (Tigase) commented 1 decade ago

This commands are by default allowed to be executed only by server administrators, so I would say this is OK.

%kobit - do you agree?
Artur Hefczyc commented 1 decade ago

I agree with Andrzej. An admin can even upload a new admin script which can do basically anything, so restricting directory navigation in this particular case does not help.
Login to comment

Issue Votes (0)

Watchers (0)

Reference

tigase/_server/server-core#484