wiki.ohea.xyz/gollum
10
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

Merge pull request #1069 from repotag/master

Browse Source 
Added security check.
This commit is contained in:
Bart Kamphorst
2015-09-20 14:31:14 +02:00
parent 288f75929d ce68a88293
commit de5aed2f6a
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/gollum/app.rb
+1
View File
@@ -176,6 +176,7 @@ module Precious
fullname = params[:file][:filename] fullname = params[:file][:filename]
tempfile = params[:file][:tempfile] tempfile = params[:file][:tempfile]
end end
halt 500 unless tempfile.is_a? Tempfile
# Remove page file dir prefix from upload path if necessary -- committer handles this itself # Remove page file dir prefix from upload path if necessary -- committer handles this itself
dir = wiki.per_page_uploads ? params[:upload_dest].match(/^(#{wiki.page_file_dir}\/+)?(.*)/)[2] : 'uploads' dir = wiki.per_page_uploads ? params[:upload_dest].match(/^(#{wiki.page_file_dir}\/+)?(.*)/)[2] : 'uploads'