An asset cannot be read from a location outside the project configuration 1.6.0

[eromano]

Versions

1.6.0

Repro steps

• Create a project
• Configure the .angular-cli.json to Read a file from a parent folder

Observed behavior

Load file from an external folder now fails because of this check :

An asset cannot be read from a location outside the project

Introduced by the PR:

64c6031#diff-9eb0a75e499bdadd44d6dc62218812b8

could be possible introduce a parameter configuration as allowOutsideOutDir but for reading? something like :

 "allowOutsideReadDir": true 

It could be false by default and be enabled by the user only when he knows the security risk behind this kind of decision.

Side note the warning message could be improved indicating the assets failing

Desired behavior

Mention any other details that might be useful (optional)

If the idea above are ok for the project I could create a PR

[tleveque23]

Was working on 1.6.4, but since the new 1.6.5 it is failing again!

[trendzetter]

Not sure if this is related but it is a somewhat similar #8613 (comment)

[dotansimha]

Same here. tried 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.7.3 :(

[Facius]

Same here on 1.70, worked with 1.50

  "assets": [
    {
      "glob": "**/*",
      "input": "./../../fonts/",
      "output": "./assets",
      "allowOutsideOutDir": true
    }
  ]

[lazysergey]

any workarounds for this?

[alan-agius4]

Closing as this is working as intended.

Files cannot be read outside of the workspace root directory as there is also a potential security concern. Especially now that deploying the application is possible via a ng deploy.

[angular-automatic-lock-bot]

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}