From b5dbc36975f1decab4459ec7c95bf86abd92391c Mon Sep 17 00:00:00 2001 From: Parker Moore Date: Thu, 28 Aug 2014 22:42:16 -0700 Subject: [PATCH] Use Jekyll.sanitized_path when adding static files to Collections. h/t @benbalter https://github.com/jekyll/jekyll/pull/2737#discussion_r16713423 Not sure if the previous code can be exploited, but being super safe is never a bad thing. --- lib/jekyll/collection.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/jekyll/collection.rb b/lib/jekyll/collection.rb index 5edfeef6..5fc3994f 100644 --- a/lib/jekyll/collection.rb +++ b/lib/jekyll/collection.rb @@ -41,7 +41,7 @@ module Jekyll doc.read docs << doc else - relative_dir = File.join(relative_directory, File.dirname(file_path)).chomp("/.") + relative_dir = Jekyll.sanitized_path(relative_directory, File.dirname(file_path)).chomp("/.") files << StaticFile.new(site, site.source, relative_dir, File.basename(full_path), self) end end