michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-02-03 14:13:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix to check if internally sourced file is under user home

Browse Source
This commit is contained in:
iliajie
2022-11-12 10:56:55 +02:00
parent 825842267a
commit ab00e4c7df
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
xterm/shellserver.pl
View File

@@ -97,7 +97,10 @@ if ($shinit) {
$sourced_file =~ s/\s+$//;
$sourced_file =~ s/^\~\///;
push(@{$shfiles}, $sourced_file)
if (!grep(/^$sourced_file$/, @{$shfiles}));
if (!grep(/^$sourced_file$/, @{$shfiles}) &&
($sourced_file !~ /^\// ||
$sourced_file =~ /^\// &&
&is_under_directory($uinfo[7], $sourced_file)));
}
}
}