{"issue":{"state":"open","pull_request":{"diff_url":null,"html_url":null,"patch_url":null},"milestone":null,"user":{"avatar_url":"https://secure.gravatar.com/avatar/2225aace1b3b4107c1ae6a033523b933?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"2225aace1b3b4107c1ae6a033523b933","url":"https://api.github.com/users/hlecorche","login":"hlecorche","id":188749},"assignee":null,"updated_at":"2011-11-16T19:42:38Z","labels":[],"closed_at":null,"comments":3,"url":"https://api.github.com/repos/avalanche123/AvalancheImagineBundle/issues/40","body":"My app structure:\r\n\r\n* app\r\n* src\r\n* vendor\r\n* .........\r\n* web\r\n * images\r\n      * image1.jpg\r\n* image2.jpg\r\n\r\nimage1.jpg is accessible and image2.jpg is not accessible.\r\nBut with \"/media/cache/my_thumb/../image2.jpg\", image2.jpg is accessible! We can read files that are outside the web directory...","html_url":"https://github.com/avalanche123/AvalancheImagineBundle/issues/40","title":"Security bug","number":40,"id":2256153,"created_at":"2011-11-16T13:22:32Z"},"action":"created","comment":{"user":{"avatar_url":"https://secure.gravatar.com/avatar/54787afbd0e7c30936101c2fa84bd89b?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"54787afbd0e7c30936101c2fa84bd89b","url":"https://api.github.com/users/lsmith77","login":"lsmith77","id":300279},"updated_at":"2011-11-16T19:42:38Z","url":"https://api.github.com/repos/avalanche123/AvalancheImagineBundle/issues/comments/2766705","body":"the reason is that if i access ``http://symfony-standard.lo/app_dev.php/media/cache/my_thumb/../me.png`` i end up on ``http://symfony-standard.lo/app_dev.php/media/cache/me.png`` but i am not sure who is responsible for this redirect.","id":2766705,"created_at":"2011-11-16T19:42:38Z"}}