diff options
author | Matthew Wild <mwild1@gmail.com> | 2016-01-07 15:37:47 +0000 |
---|---|---|
committer | Matthew Wild <mwild1@gmail.com> | 2016-01-07 15:37:47 +0000 |
commit | 78d296cfe9cc363e74aa33c21b38e6764377f9f6 (patch) | |
tree | 96462213eb1c7ba0cae399a7098652b4fbdd9a2b /plugins/mod_disco.lua | |
parent | 25e96d193528ead16d0e8cbf9ae5ef34b04619d8 (diff) | |
download | prosody-78d296cfe9cc363e74aa33c21b38e6764377f9f6.tar.gz prosody-78d296cfe9cc363e74aa33c21b38e6764377f9f6.zip |
mod_http_files: Santize the path relative to our base URL before translating it to a filesystem path, fixes a relative path traversal vulnerability
Diffstat (limited to 'plugins/mod_disco.lua')
0 files changed, 0 insertions, 0 deletions