servo / gaol

Cross-platform application sandboxing for Rust
Apache License 2.0
340 stars 40 forks source link

using relative path, allows access #46

Open schoeppl opened 6 years ago

schoeppl commented 6 years ago

If one takes a relative path, the path protection does not work. Using the given example: Just change the file access to: match File::open(&PathBuf::from("../../../../../bin/sh")) { ... } will show this behavior.