mirror of
https://github.com/webmin/webmin.git
synced 2026-05-26 08:00:31 +01:00
Normalize allowed paths with a . in them https://www.virtualmin.com/node/60401
This commit is contained in:
@@ -73,7 +73,7 @@ sub get_paths {
|
||||
$base = '/';
|
||||
}
|
||||
}
|
||||
@allowed_paths = &unique(@allowed_paths);
|
||||
@allowed_paths = map { &simplify_path($_) } &unique(@allowed_paths);
|
||||
$path = $in{'path'} || '';
|
||||
$cwd = &simplify_path($base.$path);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user