apache/incubator-storm — pull request #91 by ptgoetz (2014-04-25 20:31:22+00:00)
Title: STORM-269: prevent logviewer from serving files outside the log directory

This is a quick fix to prevent the log viewer from serving files outside of the log directory. It simply checks that the requested file has the root log directory as a parent. If this is not the case, it will not serve the file.