mirror_html/filegator
1
0
Fork 0
mirror of https://github.com/filegator/filegator.git synced 2025-08-25 15:01:41 +02:00
Code Issues Projects Releases Wiki Activity

Two consecutive periods bug - fixes #202

Browse Source
This commit is contained in:
Milos Stojanovic
2021-03-23 10:30:42 +01:00
parent eda587daff
commit 86b9752b38
2 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
backend/Services/Storage/Filesystem.php
View File

@@ -235,8 +235,11 @@ class Filesystem implements Service
private function applyPathPrefix(string $path): string
{
if (strpos($path, '..') !== false) {
$path = "/";
if ($path == '..'
|| strpos($path, '..'.$this->separator) !== false
|| strpos($path, $this->separator.'..') !== false
) {
$path = $this->separator;
}
return $this->joinPaths($this->getPathPrefix(), $path);
}