Fix path sanitization example in post. Props @gregose
This commit is contained in:
parent
e627799623
commit
30ae727e6e
|
@ -19,7 +19,7 @@ Well, we can't have that! In 1.5.1, you'll instead see:
|
||||||
|
|
||||||
{% highlight ruby %}
|
{% highlight ruby %}
|
||||||
> sanitized_path("/tmp/foobar/jail", "..c:/..c:/..c:/etc/passwd")
|
> sanitized_path("/tmp/foobar/jail", "..c:/..c:/..c:/etc/passwd")
|
||||||
=> "/tmp/foobar/jail/etc/passwd"
|
=> "/tmp/foobar/jail/..c:/..c:/..c:/etc/passwd"
|
||||||
{% endhighlight %}
|
{% endhighlight %}
|
||||||
|
|
||||||
Luckily not affecting 1.4.x, this fix will make 1.5.0 that much safer for
|
Luckily not affecting 1.4.x, this fix will make 1.5.0 that much safer for
|
||||||
|
|
Loading…
Reference in New Issue