kittoframework / kitto

86%

master: 89%

LAST BUILD ON BRANCH file-read-exploit

branch: file-read-exploit

CHANGE BRANCH

x

Reset

• file-read-exploit
• master
• supervisors
• v0.0.4
• v0.0.5
• partials
• dsl
• doc
• v0.1.0
• features
• jobs-dashboard
• v0.1.1
• 1080
• v0.2.0
• enhanced-job-error-handling
• v0.2.1
• authorize-widgets
• configurable-asset-server-adress
• configurable-asset-server-address
• pr/11
• plugify-authentication
• reload-event
• v0.2.3
• hooks
• sse_filtering
• router-split
• pr/33
• job-validator
• code-reloading
• pr/38
• broadcast-commands
• coc
• nameless-broadcast
• dsl-rewrite
• image-widget
• comment-widget
• number-widget
• v0.3.0
• rotator
• error-pages
• plug-upgrade
• rotator-typo
• generators
• v0.3.1
• asset-server-bug
• heroku-hotfix
• v0.3.2
• test-warning
• text-widget-fields
• generators-rebased
• backoff
• v0.4.0
• pr/85
• package-kitto-js
• v0.5.0
• v0.5.1
• hook-support
• elixir-warnings
• readme-docs
• binding-warnings
• job-naming
• davejlong-patch-1
• 0.5.2
• v0.5.2
• distillery
• v0.6.0-rc0
• installer-switches
• cache-string-keys
• 101
• travis-fixes
• improve-job-test
• update-travis-otp-20
• test-heroku-static
• v0.7.0
• v0.8.0
• v0.9.0
• v0.9.1
• update-mix-dependencies
• dependabot/npm_and_yarn/installer/templates/new/node-sass-4.14.1
• next
• v0.9.2

Build # 517

Build Type

push

travis-ci

Committed by davejlong

Commit Message

Asserts that requested template is in the templates directory

Closes a remote file read vulnerability where a user could break out of the
templates directory and read other files on the host.

Run Details

302 of 350 relevant lines covered (86.29%)

55.66 hits per line