Commit 71aed7ea authored by Christophe Dumez's avatar Christophe Dumez

- Fixed big security hole in erp5subversion


git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@9504 20353a03-c40f-0410-a6d1-a30d3c3de9de
parent e6297685
...@@ -577,7 +577,7 @@ class SubversionTool(BaseTool, UniqueObject, Folder): ...@@ -577,7 +577,7 @@ class SubversionTool(BaseTool, UniqueObject, Folder):
return None, None return None, None
def getHeader(self, business_template, file_path): def getHeader(self, business_template, file_path):
file_path = self.relativeToAbsolute(file_path, business_template) file_path = self._getWorkingPath(self.relativeToAbsolute(file_path, business_template))
header = '<a style="font-weight: bold" href="BusinessTemplate_viewSvnShowFile?file=' + \ header = '<a style="font-weight: bold" href="BusinessTemplate_viewSvnShowFile?file=' + \
file_path + '">' + file_path + '</a>' file_path + '">' + file_path + '</a>'
edit_path = self.editPath(business_template, file_path) edit_path = self.editPath(business_template, file_path)
...@@ -1057,7 +1057,7 @@ class SubversionTool(BaseTool, UniqueObject, Folder): ...@@ -1057,7 +1057,7 @@ class SubversionTool(BaseTool, UniqueObject, Folder):
"""Remove all files and folders in list """Remove all files and folders in list
""" """
for file_path in path_list: for file_path in path_list:
removeAll(file_path) removeAll(self._getWorkingPath(file_path))
def getModifiedTree(self, business_template, show_unmodified=False) : def getModifiedTree(self, business_template, show_unmodified=False) :
""" Return tree of files returned by svn status """ Return tree of files returned by svn status
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment