{"action":"created","issue":{"url":"https://api.github.com/repos/opengeospatial/teamengine/issues/184","repository_url":"https://api.github.com/repos/opengeospatial/teamengine","labels_url":"https://api.github.com/repos/opengeospatial/teamengine/issues/184/labels{/name}","comments_url":"https://api.github.com/repos/opengeospatial/teamengine/issues/184/comments","events_url":"https://api.github.com/repos/opengeospatial/teamengine/issues/184/events","html_url":"https://github.com/opengeospatial/teamengine/pull/184","id":170037247,"number":184,"title":"Fixes for path manipulation vulnerability.","user":{"login":"cmheazel","id":7959995,"avatar_url":"https://avatars.githubusercontent.com/u/7959995?v=3","gravatar_id":"","url":"https://api.github.com/users/cmheazel","html_url":"https://github.com/cmheazel","followers_url":"https://api.github.com/users/cmheazel/followers","following_url":"https://api.github.com/users/cmheazel/following{/other_user}","gists_url":"https://api.github.com/users/cmheazel/gists{/gist_id}","starred_url":"https://api.github.com/users/cmheazel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cmheazel/subscriptions","organizations_url":"https://api.github.com/users/cmheazel/orgs","repos_url":"https://api.github.com/users/cmheazel/repos","events_url":"https://api.github.com/users/cmheazel/events{/privacy}","received_events_url":"https://api.github.com/users/cmheazel/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-08-08T22:07:34Z","updated_at":"2016-09-09T16:08:19Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/opengeospatial/teamengine/pulls/184","html_url":"https://github.com/opengeospatial/teamengine/pull/184","diff_url":"https://github.com/opengeospatial/teamengine/pull/184.diff","patch_url":"https://github.com/opengeospatial/teamengine/pull/184.patch"},"body":"Added a ValidPath class which validates that the path is legal before it is used.  The rules in ValidPath require that a path:\r\n1) is rooted at:\r\n    - TE_BASE\r\n    - TE_INSTALL\r\n    - java.io.tmpdir\r\n    - TE_BUILD\r\n2) does not include the string \"..\"\r\n3) is not rooted at:\r\n    - c:\\Windows\r\n    - /etc\r\n    - /bin\r\n    - /usr/bin\r\n\r\nThe environment variables listed in item 1 must be set or paths will not validate."},"comment":{"url":"https://api.github.com/repos/opengeospatial/teamengine/issues/comments/245959549","html_url":"https://github.com/opengeospatial/teamengine/pull/184#issuecomment-245959549","issue_url":"https://api.github.com/repos/opengeospatial/teamengine/issues/184","id":245959549,"user":{"login":"rjmartell","id":1653506,"avatar_url":"https://avatars.githubusercontent.com/u/1653506?v=3","gravatar_id":"","url":"https://api.github.com/users/rjmartell","html_url":"https://github.com/rjmartell","followers_url":"https://api.github.com/users/rjmartell/followers","following_url":"https://api.github.com/users/rjmartell/following{/other_user}","gists_url":"https://api.github.com/users/rjmartell/gists{/gist_id}","starred_url":"https://api.github.com/users/rjmartell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rjmartell/subscriptions","organizations_url":"https://api.github.com/users/rjmartell/orgs","repos_url":"https://api.github.com/users/rjmartell/repos","events_url":"https://api.github.com/users/rjmartell/events{/privacy}","received_events_url":"https://api.github.com/users/rjmartell/received_events","type":"User","site_admin":false},"created_at":"2016-09-09T16:08:19Z","updated_at":"2016-09-09T16:08:19Z","body":"Two unit tests do not pass:\r\n\r\n1. `com.occamlab.te.TECoreTest::testNestedFailure`\r\njava.lang.NullPointerException\r\n        at com.occamlab.te.TECoreTest.getTestIndex(TECoreTest.java:62)\r\n        at com.occamlab.te.TECoreTest.testNestedFailure(TECoreTest.java:79)\r\n\r\n2. `com.occamlab.te.util.ValidPathTest::testAddElement`\r\njava.lang.AssertionError: Expected ValidPath should be c:\\TE_BASE\\foo-bar.\r\n        at com.occamlab.te.util.ValidPathTest.testAddElement(ValidPathTest.java:48)\r\n"}}
{"actor":{"display_login":"rjmartell"}}