Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 420795

Summary:	[server] Access to allowedPath's parent directory
Product:	[ECD] Orion	Reporter:	Paul Lesiecki <ntgdpl>
Component:	Server	Assignee:	Anthony Hunter <ahunter.eclipse>
Status:	RESOLVED FIXED	QA Contact:
Severity:	critical
Priority:	P3	CC:	ahunter.eclipse, simon_kaegi
Version:	4.0
Target Milestone:	5.0 RC1
Hardware:	PC
OS:	Linux
Whiteboard:

Description Paul Lesiecki

2013-10-31 06:25:59 EDT

Steps to reproduce:

1. configure the allowed local paths to /path1
2. launch orion and link folder to /path1/../
3. now you can navigate through parent folder of your allowed path (lol;)

Comment 1 Anthony Hunter

2014-02-11 12:44:48 EST

I have fixed this problem with commit:
http://git.eclipse.org/c/orion/org.eclipse.orion.server.git/commit/?id=983f46f60c214c2742d470fe87c72295d96d8f96

Comment 2 Paul Lesiecki

2014-02-11 17:46:39 EST

No unit tests for that part?