Curation config support for allowed base paths

(cherry picked from commit 4502224)

Author: kshepherd

dspace/config/modules/curate.cfg

@@ -30,3 +30,15 @@ curate.taskqueue.dir = ${dspace.dir}/ctqueues
 
 # Maximum amount of redirects set to 0 for none and -1 for unlimited
 curate.checklinks.max-redirect = 0
+
+# allowed base path(s) of curation task files
+# it is recommended to restrict this path as much as possible
+# so that the DSpace Processes framework may only load files as "tasks"
+# from a trusted location. For multiple paths, repeat this configuration
+# property for each trusted path
+# Default: ${dspace.dir}
+#curate.taskfile.base = ${dspace.dir}
+
+# allowed base path of reporter output.
+# Default: ${dspace.dir}/log
+#curate.reporter.base = ${dspace.dir}/log