michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-05-04 22:30:33 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Escape uploaded path

Browse Source
This commit is contained in:
Jamie Cameron
2017-12-25 23:09:44 -08:00
parent 645a2d3067
commit ce5d99fe6b
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
updown/upload.cgi
View File

@@ -70,7 +70,8 @@ for($i=0; defined($in{"upload$i"}); $i++) {
else {
$path = $in{'dir'};
}
print &text('upload_saving', "<tt>$path</tt>"),"<br>\n";
print &text('upload_saving',
"<tt>".&html_escape($path)."</tt>"),"<br>\n";
if (!&open_tempfile(FILE, ">$path", 1)) {
&error(&text('upload_eopen', "<tt>$path</tt>", $!));
}