| commit | b7ed261e7dfd367f3bc5a8bef654b91ba74feb97 | |
| author | Matthew Wild <mwild1@gmail.com> | |
| Thu, 7 Jan 2016 15:37:47 +0000 (7 15:37 +0000) | ||
| committer | Matthew Wild <mwild1@gmail.com> | |
| Thu, 7 Jan 2016 15:37:47 +0000 (7 15:37 +0000) | ||
| tree | 96462213eb1c7ba0cae399a7098652b4fbdd9a2b | treesnapshot (tar.gz zip) |
| parent | 79ad494b8e1452f0702bb4c5caa6ab6a2ff5b813 | commitdiff |
mod_http_files: Santize the path relative to our base URL before translating it to a filesystem path, fixes a relative path traversal vulnerability
| plugins/mod_http_files.lua | diffblobblamehistory |