mirror of
https://github.com/webmin/webmin.git
synced 2026-05-15 11:20:29 +01:00
04ae776e6a
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
* Note: Validate File Manager action name/file parameters as checked paths under the current directory and `allowed_paths` before operations, blocking traversal and symlink escapes.
29 lines
472 B
Perl
Executable File
29 lines
472 B
Perl
Executable File
#!/usr/local/bin/perl
|
|
|
|
require './filemin-lib.pl';
|
|
&ReadParse();
|
|
|
|
get_paths();
|
|
|
|
my @errors;
|
|
|
|
foreach $name (split(/\0/, $in{'name'})) {
|
|
my $full = &validate_filename_path($name);
|
|
if (!can_write($full)) {
|
|
push @errors,
|
|
"$name - $text{'error_write'}";
|
|
next;
|
|
}
|
|
if (!&unlink_file($full)) {
|
|
push @errors,
|
|
"$name - $text{'error_delete'}: $!";
|
|
}
|
|
}
|
|
|
|
if (scalar(@errors) > 0) {
|
|
print_errors(@errors);
|
|
}
|
|
else {
|
|
&redirect("index.cgi?path=".&urlize($path));
|
|
}
|