mirror of
https://github.com/webmin/webmin.git
synced 2026-08-31 18:50:39 +01:00
Ensure detached filename is not a path
This commit is contained in:
@@ -146,6 +146,7 @@ else {
|
||||
$attach->{'type'} =~ /\/(\S+)$/;
|
||||
$fn = "file.$1";
|
||||
}
|
||||
$fn =~ s/^.*\///;
|
||||
$path = "$in{'dir'}/$fn";
|
||||
}
|
||||
else {
|
||||
|
||||
Reference in New Issue
Block a user