clarify why absolute is tested & stripped here

file_prune also fails on absolute filenames now
master
Joey Hess 2010-04-20 13:49:46 -04:00
parent ca33969823
commit 7a92c0aa4a
1 changed files with 1 additions and 1 deletions

View File

@ -92,7 +92,7 @@ sub cgi_editpage ($$) {
# wiki_file_regexp. # wiki_file_regexp.
my ($page)=$form->field('page')=~/$config{wiki_file_regexp}/; my ($page)=$form->field('page')=~/$config{wiki_file_regexp}/;
$page=possibly_foolish_untaint($page); $page=possibly_foolish_untaint($page);
my $absolute=($page =~ s#^/+##); my $absolute=($page =~ s#^/+##); # absolute name used for force location
if (! defined $page || ! length $page || if (! defined $page || ! length $page ||
file_pruned($page)) { file_pruned($page)) {
error(gettext("bad page name")); error(gettext("bad page name"));