Bug #8558
yaml terminus should downcase all file paths
| Status: | Accepted | Start date: | 07/21/2011 | |
|---|---|---|---|---|
| Priority: | High | Due date: | ||
| Assignee: | - | % Done: | 0% |
|
| Category: | plumbing | |||
| Target version: | - | |||
| Affected Puppet version: | development | Branch: | ||
| Keywords: | ||||
| Votes: | 0 |
Description
This is not a regression, and was identified in 2.7.x
When using the yaml terminus, it is possible that it could wind up writing out file paths with upper-case letters if the request.key has upper-case letters. The request.key should be downcased to avoid capital letters in the pathnames.
History
Updated by Daniel Pittman 10 months ago
Bug #8558: yaml terminus should downcase all file paths
This is not a regression, and was identified in 2.7.x
When using the yaml terminus, it is possible that it could wind up writing out file paths with upper-case letters if the request.key has upper-case letters. The request.key should be downcased to avoid capital letters in the pathnames.
This is fairly important, actually: the faces expose a whole bunch of indirections to the user directly, so they could reasonably pass unfiltered inputs like upper-case keys. If the back-end doesn’t sanitise, these could easily cause this problem for us.
Updated by James Turnbull 9 months ago
- Category set to plumbing
- Status changed from Unreviewed to Accepted
- Priority changed from Normal to High
Updated by K Hightower 9 months ago
I am looking for bugs to fix, any one working this ticket?