[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2506: Magic Folder: enforce that downloaded files are only written below the magic folder directory

[Tahoe-LAFS]

#2506: Magic Folder: enforce that downloaded files are only written below the
magic folder directory
-------------------------------------+-------------------------------------
     Reporter:  daira                |      Owner:  daira
         Type:  defect               |     Status:  new
     Priority:  major                |  Milestone:  undecided
    Component:  code-frontend-       |    Version:  n/a
  magic-folder                       |   Keywords:  otf-magic-folder-
   Resolution:                       |  objective4 test-needed security
Launchpad Bug:                       |  unicode path blocks-merge
-------------------------------------+-------------------------------------

Comment (by daira):

 Arrgh, `FilePath.preauthChild` is insecure:
 [https://twistedmatrix.com/trac/ticket/6527]

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2506#comment:10>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage