Fix FileSystem path validation order to normalize '..' and '.' before restriction checks. Currently we're rejecting any paths that contain '.' or '..' as invalid paths (since they end with '.', which is restricted in the spec). Normalize the path first and then do the name validation.
Created attachment 70168 [details] Patch
Comment on attachment 70168 [details] Patch LGTM
Comment on attachment 70168 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=70168&action=review > LayoutTests/fast/filesystem/resources/op-get-entry.js:60 > + function(helper) { helper.getFile('/a', '/a/../../b/./c/../../../../../e.txt', {create:true}); }, Consider adding a test with "..." to check that it is invalid (unless you already have one). > WebCore/fileapi/DOMFileSystemBase.cpp:145 > + if (DOMFilePath::isAbsolute(path)) How about: if (!DOMFilePath::isAbsolute(path)) path = DOMFilePath::append(base->fullPath(), path); String absolutePath = DOMFilePath::removeExtraParentReferences(path); In fact make this all into a function b/c there is so much common code in these two places. Feel free to change names but this is what I'm thinking: bool DOMFileSystemBase::domPathToPlatformPath(String domPath, String& platformPath) { if (!DOMFilePath::isAbsolute(path)) domPath = DOMFilePath::append(base->fullPath(), domPath); String absolutePath = DOMFilePath::removeExtraParentReferences(path); if (!DOMFilePath::isValidPath(absolutePath)) return false; platformPath = m_asyncFileSystem->virtualToPlatformPath(absolutePath); return true; } String platformPath; if (!domPathToPlatformPath(path, platformPath)) return false;
Committed r69382: <http://trac.webkit.org/changeset/69382>