From ffb017565b0cb85b503a3a0c08dd2c40fa5eeb70 Mon Sep 17 00:00:00 2001 From: Jamie Cameron Date: Wed, 16 Jan 2019 19:38:55 -0800 Subject: [PATCH] Normalize allowed paths with a . in them https://www.virtualmin.com/node/60401 --- filemin/filemin-lib.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/filemin/filemin-lib.pl b/filemin/filemin-lib.pl index d2193b8e4..fddbe509b 100644 --- a/filemin/filemin-lib.pl +++ b/filemin/filemin-lib.pl @@ -73,7 +73,7 @@ sub get_paths { $base = '/'; } } - @allowed_paths = &unique(@allowed_paths); + @allowed_paths = map { &simplify_path($_) } &unique(@allowed_paths); $path = $in{'path'} || ''; $cwd = &simplify_path($base.$path);