mirror/processwire
1
0
Fork 0
mirror of https://github.com/processwire/processwire.git synced 2025-08-26 08:04:38 +02:00
Code Issues Releases Wiki Activity

Attempt to fix processwire/processwire-issues#801

Browse Source
This commit is contained in:
Ryan Cramer
2019-02-05 08:46:10 -05:00
parent 1215e706e1
commit 09c936dba9
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
wire/core/WireFileTools.php
View File

@@ -481,8 +481,9 @@ class WireFileTools extends Wire {
return false; return false;
} }
if(strpos($pathname, '//') !== false) { $pos = strpos($pathname, '//');
// URLs or accidental extra slashes not allowed if($pos !== false && $pos !== strpos($this->wire('config')->paths->assets, '//')) {
// URLs or accidental extra slashes not allowed, unless they also appear in a known safe system path
if($throw) throw new WireException('pathname may not contain double slash “//”'); if($throw) throw new WireException('pathname may not contain double slash “//”');
return false; return false;
} }