gitlab-grit 2.7.2 → 2.7.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 727486f55a14379860dea18408acb3617a2e2398
-  data.tar.gz: cd06b6d3eacba266cc8d7d7692d6d74d5457e256
+  metadata.gz: a8c6f512f0477d03aeb48a9626fa774dd9f062d4
+  data.tar.gz: 284e6614616088e8e0f607240ae231ad89126b43
 SHA512:
-  metadata.gz: ef7848f04f4d0aa8038d21cdf7182b9b5853270f276d842303f2ea7eef5ff0530ec04f08034595673e567fdef46c7e70d8b726ac9b79c3eb667595f4f2972279
-  data.tar.gz: a78b09a020528c6b8a6a706988db9cb58aba6ba985f4c0758bd6ca68cf48e4100a3ff7a748f9f1fd94604a1a3f2a72e6c46a9e448ba18d903f922fd92f5e6e9e
+  metadata.gz: 348f57115329b50107c46e2a12f9d1d100d7c7aa69b2c6949fa3a15734bdff0098523f44ad57df11e26873037311628e4957d3b7c806b6454a386e1fc4d7aa83
+  data.tar.gz: 40fd462abe147a14c0883756a55ba11a69c054df8c87233d9271f98beabed8949d6db886ebd7503dc90d53285db413c53cda738e52d3649a9c28f7722f177939

data/VERSION

@@ -1 +1 @@
-2.7.2
+2.7.3

data/lib/grit/git-ruby/repository.rb

@@ -683,7 +683,9 @@ module Grit
       end
 
       def self.add_file(name, contents)
-        File.open(name, 'w') do |f|
+        path = File.join(Dir.pwd, name)
+        raise "Invalid path: #{path}" unless File.absolute_path(path) == path
+        File.open(path, 'w') do |f|
           f.write contents
         end
       end

data/lib/grit/git.rb

@@ -117,7 +117,9 @@ module Grit
     #
     # Returns Boolean
     def fs_exist?(file)
-      File.exist?(File.join(self.git_dir, file))
+      path = File.join(self.git_dir, file)
+      raise "Invalid path: #{path}" unless File.absolute_path(path) == path
+      File.exist?(path)
     end
 
     # Read a normal file from the filesystem.
@@ -125,7 +127,9 @@ module Grit
     #
     # Returns the String contents of the file
     def fs_read(file)
-      File.read(File.join(self.git_dir, file))
+      path = File.join(self.git_dir, file)
+      raise "Invalid path: #{path}" unless File.absolute_path(path) == path
+      File.read(path)
     end
 
     # Write a normal file to the filesystem.
@@ -135,6 +139,7 @@ module Grit
     # Returns nothing
     def fs_write(file, contents)
       path = File.join(self.git_dir, file)
+      raise "Invalid path: #{path}" unless File.absolute_path(path) == path
       FileUtils.mkdir_p(File.dirname(path))
       File.open(path, 'w') do |f|
         f.write(contents)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: gitlab-grit
 version: !ruby/object:Gem::Version
-  version: 2.7.2
+  version: 2.7.3
 platform: ruby
 authors:
 - Tom Preston-Werner
@@ -10,7 +10,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-10-09 00:00:00.000000000 Z
+date: 2014-12-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: charlock_holmes