Ticket #49 (closed defect: fixed)
Exclude build.xml from ANT script in modelglueapplicationtemplate
| Reported by: | dcarabetta@… | Owned by: | joe.rinehart |
|---|---|---|---|
| Priority: | normal | Milestone: | 2.0 Beta 1 Bugfixes |
| Version: | Severity: | normal | |
| Keywords: | Cc: |
Description
Just a small thing, but it's a bit of a security hole if somebody were to use the modelglueapplicationtemplate's build.xml file to create a new application because the build.xml file is included in the copy directive. If somebody gets to that file, you could potentially expose your system structure to the public. I modified the build.xml file in that directory to read:
<copy todir="${target}">
<fileset dir="${source}">
<exclude name="build.xml" />
</fileset>
</copy>
Granted, it doesn't solve the remaining hole for when somebody manually copies the whole directory structure, but this eliminates some of the problem.
![(please configure the [header_logo] section in trac.ini)](/ModelGlue.com/trac.cgi/chrome/site/your_project_logo.png)