clarify why absolute is tested & stripped here
file_prune also fails on absolute filenames nowmaster
parent
ca33969823
commit
7a92c0aa4a
|
@ -92,7 +92,7 @@ sub cgi_editpage ($$) {
|
||||||
# wiki_file_regexp.
|
# wiki_file_regexp.
|
||||||
my ($page)=$form->field('page')=~/$config{wiki_file_regexp}/;
|
my ($page)=$form->field('page')=~/$config{wiki_file_regexp}/;
|
||||||
$page=possibly_foolish_untaint($page);
|
$page=possibly_foolish_untaint($page);
|
||||||
my $absolute=($page =~ s#^/+##);
|
my $absolute=($page =~ s#^/+##); # absolute name used for force location
|
||||||
if (! defined $page || ! length $page ||
|
if (! defined $page || ! length $page ||
|
||||||
file_pruned($page)) {
|
file_pruned($page)) {
|
||||||
error(gettext("bad page name"));
|
error(gettext("bad page name"));
|
||||||
|
|
Loading…
Reference in New Issue