Cédric Krier f4e14d65cc Sanitize path in file_open ...

file_open did not prevent to use up-level reference in file name.
A forged Report name could be used to open file outside the trytond root.

CVE-2016-1242
issue5808
review28691002

2016-08-30 12:15:25 +02:00

..

__init__.py

Follow PEP-0249 for Transaction and backends

2016-03-03 21:51:57 +01:00

datetime_strftime.py

Fix most flake8 errors

2014-12-02 12:54:01 +01:00

decimal_.py

Add support for Python 3

2016-02-07 16:46:16 +01:00

misc.py

Sanitize path in file_open

2016-08-30 12:15:25 +02:00

singleton.py

Fix most flake8 errors

2014-12-02 12:54:01 +01:00

StringMatcher.py

Fix most flake8 errors

2014-12-02 12:54:01 +01:00