pgAdmin 4 commit: Ensure the file manager properly escapes file &direc - Mailing list pgadmin-hackers

From Dave Page
Subject pgAdmin 4 commit: Ensure the file manager properly escapes file &direc
Date
Msg-id E1exsUa-0000AG-4O@gothos.postgresql.org
Whole thread Raw
List pgadmin-hackers
Ensure the file manager properly escapes file & directory names. Fixes #3196

Branch
------
master

Details
-------
https://git.postgresql.org/gitweb?p=pgadmin4.git;a=commitdiff;h=9ea118ca572707cac87ee5182ec5ce1538cca22f
Author: Murtuza Zabuawala <murtuza.zabuawala@enterprisedb.com>

Modified Files
--------------
.../feature_tests/xss_checks_file_manager_test.py  | 114 +++++++++++++++++++++
web/pgadmin/misc/file_manager/static/js/utility.js |  14 +--
web/pgadmin/tools/sqleditor/static/js/sqleditor.js |  15 +--
web/regression/feature_utils/pgadmin_page.py       |  17 +--
4 files changed, 139 insertions(+), 21 deletions(-)


pgadmin-hackers by date:

Previous
From: Murtuza Zabuawala
Date:
Subject: [pgAdmin4][RM#3200] Don't set empty string for host/hostaddr in modelwhen service is used
Next
From: Dave Page
Date:
Subject: pgAdmin 4 commit: Pass the service name to external processes. Fixes#3