Skip to content
This repository has been archived by the owner on Sep 6, 2021. It is now read-only.

Disallow leading dots #3437

Merged
merged 4 commits into from
Apr 16, 2013
Merged

Disallow leading dots #3437

merged 4 commits into from
Apr 16, 2013

Conversation

dangoor
Copy link
Contributor

@dangoor dangoor commented Apr 15, 2013

This is to avoid names like ".." which could have security implications.

Note that the first commit is just importing rewire. The second commit is the relevant one for review.

@ghost ghost assigned njx Apr 15, 2013
@dangoor
Copy link
Contributor Author

dangoor commented Apr 15, 2013

To @njx as this is part of the brackets-registry work.

@njx
Copy link

njx commented Apr 15, 2013

I guess the rewire guy uses IntellJ :) I filed a bug in his repo to remove the .idea folder from his npm package.

@njx
Copy link

njx commented Apr 15, 2013

(Should we consider manually removing the .idea folder ourselves, just to reduce noise in the codebase?)

@njx
Copy link

njx commented Apr 15, 2013

Added all my comments on the second commit. Looks good with just those few nits--feel free to fix and merge.

@dangoor
Copy link
Contributor Author

dangoor commented Apr 16, 2013

Nits fixed. Merging.

dangoor added a commit that referenced this pull request Apr 16, 2013
@dangoor dangoor merged commit c31bb08 into master Apr 16, 2013
@dangoor dangoor deleted the dangoor/disallow-dot branch April 16, 2013 14:18
peterflynn added a commit that referenced this pull request Apr 17, 2013
* origin/master: (28 commits)
  updated package validator based on comments in #3437
  remove spurious IntelliJ files
  Updated by ALF automation.
  Another round of code review changes.
  Move HTML templates to htmlContent
  Tweaked dialog so it's centered a little better
  Renamed ExtensionMgr to ExtensionManager
  Code review fixes.
  Update comments to remove the Mustache note, since these can work with Handlebars too
  Make JSHint happy.
  Respond to review comments
  Initial extension manager dialog/view/model (with non-final layout)
  Move out hover preview menu item label to strings.js for localization. Remove unused variables and clean up some variable declarations.
  Merging Glenn's Hover Preview extension into core.
  Only allow leading numbers and letters (largely to prevent names like "..")
  import rewire to assist in testing
  Update Getting started screenshot for 'de' locale
  Fix DISALLOWED_WORDS placeholder in 'de' locale
  Updated by ALF automation.
  'de' locale: Fix Travis build errors (duplicate strings), minor wording edits
  ...
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants