E&S CVS Commit: PEAK - Add tests for /-escapes (e.g. /policy, /user, /environ, etc.) in traversal

pje at eby-sarna.com pje at eby-sarna.com
Sun Oct 17 16:52:00 EDT 2004


Module Name:	PEAK
Committed By:	pje
Date:		Sun Oct 17 20:51:10 UTC 2004

Modified Files:
	PEAK/src/peak/web: publish.py skins.py
	PEAK/src/peak/web/tests: test_environ.py

Log Message:
Add tests for /-escapes (e.g. /policy, /user, /environ, etc.) in traversal
paths.  Added guard code to ensure that trying to get the URL of something
like /policy or /environ/SCRIPT_NAME will fail.


To view diffs of this commit, you can use the following URL(s):
http://cvs.eby-sarna.com/PEAK/src/peak/web/publish.py.diff?r1=1.50&r2=1.51
http://cvs.eby-sarna.com/PEAK/src/peak/web/skins.py.diff?r1=1.25&r2=1.26
http://cvs.eby-sarna.com/PEAK/src/peak/web/tests/test_environ.py.diff?r1=1.13&r2=1.14

To generate a diff of this commit:
cvs rdiff -r1.50 -r1.51 PEAK/src/peak/web/publish.py
cvs rdiff -r1.25 -r1.26 PEAK/src/peak/web/skins.py
cvs rdiff -r1.13 -r1.14 PEAK/src/peak/web/tests/test_environ.py

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.




More information about the source-changes mailing list