Fix path sanitization example in post. Props @gregose
This commit is contained in:
parent
e627799623
commit
30ae727e6e
|
@ -19,7 +19,7 @@ Well, we can't have that! In 1.5.1, you'll instead see:
|
|||
|
||||
{% highlight ruby %}
|
||||
> sanitized_path("/tmp/foobar/jail", "..c:/..c:/..c:/etc/passwd")
|
||||
=> "/tmp/foobar/jail/etc/passwd"
|
||||
=> "/tmp/foobar/jail/..c:/..c:/..c:/etc/passwd"
|
||||
{% endhighlight %}
|
||||
|
||||
Luckily not affecting 1.4.x, this fix will make 1.5.0 that much safer for
|
||||
|
|
Loading…
Reference in New Issue