Merge branch "dev" into branch "staging"

[TheophileDiot]

No description provided.

To fix the problem, we need to ensure that the constructed file paths are contained within the intended directories. This can be achieved by normalizing the paths and verifying that they start with the expected base paths. We will use os.path.normpath to normalize the paths and then check if the normalized paths start with the respective base paths.

To fix the problem, we need to ensure that the constructed file paths are safe and do not allow directory traversal attacks. This can be achieved by normalizing the paths and verifying that they are contained within the intended root directories.

1. Normalize the constructed paths using os.path.normpath to remove any ".." segments.
2. Verify that the normalized paths start with the intended root directories (PRO_PLUGINS_PATH, EXTERNAL_PLUGINS_PATH, or CORE_PLUGINS_PATH).

To fix the problem, we need to ensure that the constructed file paths are contained within the intended base directories. This can be achieved by normalizing the paths and verifying that they start with the base directory paths. We will use os.path.normpath to normalize the paths and then check if the normalized paths start with the base paths.

To fix the problem, we need to ensure that the constructed file path is safe and does not allow directory traversal. This can be achieved by normalizing the path and verifying that it is contained within a safe root directory. We will use os.path.normpath to normalize the path and then check that the normalized path starts with the expected root directory.

1. Normalize the plugin_path using os.path.normpath.
2. Verify that the normalized path starts with the expected root directory.
3. If the path is valid, proceed with the existing logic; otherwise, return an error.

To fix the problem, we need to ensure that the constructed file path is contained within a safe root folder. We can achieve this by normalizing the path using os.path.normpath and then checking that the normalized path starts with the root folder. This will prevent any path traversal attacks.

1. Normalize the path using os.path.normpath to remove any ".." segments.
2. Check that the normalized path starts with the root folder.
3. If the path is not within the root folder, raise an exception or handle the error appropriately.

To fix the problem, we need to ensure that the paths constructed from user input are validated and sanitized. Specifically, we should:

1. Normalize the constructed paths to remove any ".." segments.
2. Ensure that the normalized paths are within a safe root directory.

We will modify the get_plugin_path function to normalize the paths and check that they are within the expected directories. Additionally, we will update the custom_plugin_page function to use these validated paths.

To fix the problem, we need to ensure that any paths constructed from user input are validated to prevent path traversal attacks. This can be achieved by normalizing the paths and ensuring they are within a predefined safe directory. Specifically, we will:

1. Normalize the plugin_fs_path to remove any ".." segments.
2. Check that the normalized path starts with one of the allowed base paths (PRO_PLUGINS_PATH, EXTERNAL_PLUGINS_PATH, or CORE_PLUGINS_PATH).

To fix the problem, we need to ensure that the constructed file paths are validated to prevent path traversal attacks. This can be achieved by normalizing the path and ensuring it starts with one of the allowed base paths. We will use os.path.normpath to normalize the path and then check if the resulting path starts with the expected base paths.

1. Normalize the tmp_page_dir path using os.path.normpath.
2. Check if the normalized path starts with one of the allowed base paths (EXTERNAL_PLUGINS_PATH, PRO_PLUGINS_PATH, CORE_PLUGINS_PATH).
3. If the path is not valid, raise an exception or handle the error appropriately.