mytardis/mytardis — pull request #70 by tjdett (2012-03-22 05:28:12+00:00)
Title: Fixing a potential security issue in `staging.py`

The filename `write_uploaded_file_to_dataset()` uses is now striped to the path basename, which prevents absolute paths being used to write uploaded files to arbitrary filesystem locations.