A cikin tsarin gidan yanar gizon Grails, wanda aka tsara don haɓaka aikace-aikacen yanar gizo daidai da tsarin MVC a cikin Java, Groovy da sauran yarukan JVM, an gano raunin da zai ba ku damar aiwatar da lambar ku a cikin yanayin da gidan yanar gizon yake. aikace-aikacen yana gudana. Ana amfani da raunin ta hanyar aika buƙatu na musamman wanda ke ba maharin damar zuwa ClassLoader. Matsalar tana faruwa ne ta hanyar aibi a cikin dabaru masu ɗaure bayanai, waɗanda ake amfani da su duka lokacin ƙirƙirar abubuwa da kuma lokacin ɗaure da hannu ta amfani da bindData. An warware batun a cikin saki 3.3.15, 4.1.1, 5.1.9, da 5.2.1.
Bugu da ƙari, za mu iya lura da lahani a cikin Ruby module tzinfo, wanda ke ba ku damar zazzage abubuwan da ke cikin kowane fayil, gwargwadon haƙƙin samun damar aikace-aikacen da aka kai hari. Rashin lahani ya faru ne saboda rashin ingantaccen bincike don amfani da haruffa na musamman a cikin sunan yankin lokaci da aka ƙayyade a cikin hanyar TZInfo :: Timezone.get. Matsalar tana shafar aikace-aikacen da ke ba da bayanan waje mara inganci zuwa TZInfo :: Timezone.get. Misali, don karanta fayil ɗin /tmp/payload, kuna iya ƙididdige ƙima kamar "foo\n/../.././tmp/payload".
source: budenet.ru