Simon Detheridge 56dcbefb5b Check for safe paths in all ProjectEntityHandler methods ...

Some import mechanisms (for example, Github project import) call methods such as 'upsert*' directly, bypassing existing filename checks.

Added checks to all methods in ProjectEntityHandler that can create or rename a file.

bug: overleaf/sharelatex#908
Signed-off-by: Simon Detheridge <s@sd.ai>

2018-10-08 15:31:04 +01:00

..

DocLinesComparitorTests.coffee

…

ProjectApiControllerTests.coffee

…

ProjectControllerTests.coffee

…

ProjectCreationHandlerTests.coffee

…

ProjectDeleterTests.coffee

…

ProjectDetailsHandlerTests.coffee

…

ProjectDuplicatorTests.coffee

clean up broken project on error in ProjectDuplicator

2018-10-02 12:14:22 +01:00

ProjectEditorHandlerTests.coffee

…

ProjectEntityHandlerTests.coffee

…

ProjectEntityMongoUpdateHandlerTests.coffee

…

ProjectEntityUpdateHandlerTests.coffee

Check for safe paths in all ProjectEntityHandler methods

2018-10-08 15:31:04 +01:00

ProjectGetterTests.coffee

…

ProjectLocatorTests.coffee

…

ProjectOptionsHandlerTests.coffee

…

ProjectRootDocManagerTests.coffee

…

ProjectUpdateHandlerTests.coffee

…

SafePathTests.coffee

Add method to sanitize full paths

2018-10-08 14:48:17 +01:00