Ilia Ross 09da9e6104 Fix unvalidated password file path in Nginx module ...

ⓘ The password file path was taken from the request without any check, so it could point at any file on the system, which was then read or written.

It is now checked against the allowed directories, the same way it already is when the path is first set.

W1 and V4

2026-08-20 14:24:03 +02:00

2.0 KiB

Executable File

Raw Blame History

View Raw