• Robert May's avatar
    Intercept dir traversals in GitlabUploader · 614dbf8d
    Robert May authored
    This adds a general filter that checks common attack
    vectors in subclasses of GitlabUploader. It runs before
    Carrierwave caches the file to run
    `Gitlab::Utils.check_path_traversal!` on the fields
    which have the potential to be exploited.
    614dbf8d
gitlab_uploader.rb 4.19 KB