Comment 36 for bug 1496277

Revision history for this message
Zane Bitter (zaneb) wrote : Re: template-validate may read server local files (CVE-2015-5295)

Steve and I have both looked at this and its proving remarkably resistant to a fix that doesn't create other regressions :( We still have some ideas though.