[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2506: Magic Folder: enforce that downloaded files are only written below the magic folder directory

[Tahoe-LAFS]

#2506: Magic Folder: enforce that downloaded files are only written below the
magic folder directory
-------------------------------------+-------------------------------------
     Reporter:  daira                |      Owner:  daira
         Type:  defect               |     Status:  new
     Priority:  major                |  Milestone:  undecided
    Component:  code-frontend-       |    Version:  n/a
  magic-folder                       |   Keywords:  otf-magic-folder-
   Resolution:                       |  objective4 test-needed security
Launchpad Bug:                       |  unicode path blocks-merge
-------------------------------------+-------------------------------------

Comment (by dawuud):

 I've extended the `test_alice_bob` test to use an insecure path... however
 it is unclear where this InsecurePath exception will surface.. and
 therefore I am not sure what the proper way to test for it...

 I *could* make the test check for the existence of the offending file
 outside of the magic-folder directory... this might be sufficient to test
 for the bad behavior... but it would stop working when we fix our code to
 fire the failure containing the exception...

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2506#comment:3>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage