From 899ab31fff9b34bc125faf75b79a89e390deb2cf Mon Sep 17 00:00:00 2001
From: Joram Wilander <jwawilander@gmail.com>
Date: Fri, 1 Sep 2017 09:00:27 -0400
Subject: Implement experimental REST API endpoints for plugins (#7279)

* Implement experimental REST API endpoints for plugins

* Updates per feedback and rebase

* Update tests

* Further updates

* Update extraction of plugins

* Use OS temp dir for plugins instead of search path

* Fail extraction on paths that attempt to traverse upward

* Update pluginenv ActivePlugins()
---
 utils/path.go | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 utils/path.go

(limited to 'utils/path.go')

diff --git a/utils/path.go b/utils/path.go
new file mode 100644
index 000000000..5f921b41d
--- /dev/null
+++ b/utils/path.go
@@ -0,0 +1,15 @@
+// Copyright (c) 2017-present Mattermost, Inc. All Rights Reserved.
+// See License.txt for license information.
+
+package utils
+
+import (
+	"path/filepath"
+	"strings"
+)
+
+// PathTraversesUpward will return true if the path attempts to traverse upwards by using
+// ".." in the path.
+func PathTraversesUpward(path string) bool {
+	return strings.HasPrefix(filepath.Clean(path), "..")
+}
-- 
cgit v1.2.3-1-g7c22