~bzr-pqm/bzr/bzr.dev

1
2
3
4
5
6
7
8
9
10
# This file is for listing TODOs for branches that are being worked on.
# It should ALWAYS be empty in the mainline or in integration branches.
# 

Security: it should be impossible, by default, to access files above the base of
the backing transport of the SmartServerRequestHandler.  Currently '..' and the
like are not vetted, however.

Similarly, the SmartWSGIApp should also be careful to disallow '..' and the
like.