{"action":"created","issue":{"url":"https://api.github.com/repos/LinusU/node-appdmg/issues/55","labels_url":"https://api.github.com/repos/LinusU/node-appdmg/issues/55/labels{/name}","comments_url":"https://api.github.com/repos/LinusU/node-appdmg/issues/55/comments","events_url":"https://api.github.com/repos/LinusU/node-appdmg/issues/55/events","html_url":"https://github.com/LinusU/node-appdmg/issues/55","id":61038991,"number":55,"title":"Path resolve not handling back-tracking paths","user":{"login":"stephan-nordnes-eriksen","id":2276383,"avatar_url":"https://avatars.githubusercontent.com/u/2276383?v=3","gravatar_id":"","url":"https://api.github.com/users/stephan-nordnes-eriksen","html_url":"https://github.com/stephan-nordnes-eriksen","followers_url":"https://api.github.com/users/stephan-nordnes-eriksen/followers","following_url":"https://api.github.com/users/stephan-nordnes-eriksen/following{/other_user}","gists_url":"https://api.github.com/users/stephan-nordnes-eriksen/gists{/gist_id}","starred_url":"https://api.github.com/users/stephan-nordnes-eriksen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stephan-nordnes-eriksen/subscriptions","organizations_url":"https://api.github.com/users/stephan-nordnes-eriksen/orgs","repos_url":"https://api.github.com/users/stephan-nordnes-eriksen/repos","events_url":"https://api.github.com/users/stephan-nordnes-eriksen/events{/privacy}","received_events_url":"https://api.github.com/users/stephan-nordnes-eriksen/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-03-13T11:05:23Z","updated_at":"2015-03-13T12:51:47Z","closed_at":null,"body":"The path resolving of `contents` does not allow for back-tracking paths, eg. `\"../../Folder/file.app\"` will not work.\r\n\r\nIn my case, I would like to have the `.json` file indicating my dmg package in it's own folder with some of the stuff I need for this, and I have the following which does not work:\r\n\r\n    //...\r\n    \"contents\": [\r\n      { \"x\": 192, \"y\": 344, \"type\": \"file\", \"path\": \"../dist/MyApp/osx64/MyApp.app\" },\r\n    //..."},"comment":{"url":"https://api.github.com/repos/LinusU/node-appdmg/issues/comments/78957572","html_url":"https://github.com/LinusU/node-appdmg/issues/55#issuecomment-78957572","issue_url":"https://api.github.com/repos/LinusU/node-appdmg/issues/55","id":78957572,"user":{"login":"LinusU","id":189580,"avatar_url":"https://avatars.githubusercontent.com/u/189580?v=3","gravatar_id":"","url":"https://api.github.com/users/LinusU","html_url":"https://github.com/LinusU","followers_url":"https://api.github.com/users/LinusU/followers","following_url":"https://api.github.com/users/LinusU/following{/other_user}","gists_url":"https://api.github.com/users/LinusU/gists{/gist_id}","starred_url":"https://api.github.com/users/LinusU/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/LinusU/subscriptions","organizations_url":"https://api.github.com/users/LinusU/orgs","repos_url":"https://api.github.com/users/LinusU/repos","events_url":"https://api.github.com/users/LinusU/events{/privacy}","received_events_url":"https://api.github.com/users/LinusU/received_events","type":"User","site_admin":false},"created_at":"2015-03-13T12:51:47Z","updated_at":"2015-03-13T12:51:47Z","body":"Could you please attach the output from the command, it should say something like `\"...\" not found at: ...`."}}