[TVB-1137] Fix problem with possible script injection when working with links. - Jira TVB

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Blocker
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 1.1.2
Component/s: None
Labels:
None

Epic Link:
Core
Sprint:
Sprint 13

Description

evals are dangerous

http://127.0.0.1:8081/project/removelink/a/b/__import__('os').system('echo evil command')

Gliffy Diagrams

Attachments

Activity

People

Assignee:: Mihai Andrei

Reporter:: Mihai Andrei

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 06/Jan/14 2:50 PM

Updated:: 14/Mar/14 6:27 PM

Resolved:: 14/Mar/14 6:27 PM

Time Tracking

Estimated:

4h

Remaining:

0m

Logged:

5h