Fix a chroot issue where the path /.. (and related paths) are not caught and removed.
Signed-off-by: Matthew Dawson <matthew@mjdsystems.ca>
This commit is contained in:
parent
290b2d7355
commit
61ce6e21ec
|
@ -111,7 +111,7 @@ class OC_FILESYSTEM{
|
||||||
if(substr($path,0,1)!=='/'){
|
if(substr($path,0,1)!=='/'){
|
||||||
$path='/'.$path;
|
$path='/'.$path;
|
||||||
}
|
}
|
||||||
if(strstr($path,'/../')){
|
if(strstr($path,'/../') || strrchr($path, '/') === '/..' ){
|
||||||
return false;
|
return false;
|
||||||
}
|
}
|
||||||
return true;//dummy untill premissions are correctly implemented, also the correcty value because for now users are locked in their seperate data dir and can read/write everything in there
|
return true;//dummy untill premissions are correctly implemented, also the correcty value because for now users are locked in their seperate data dir and can read/write everything in there
|
||||||
|
|
Loading…
Reference in New Issue