GNUsocial/gnu-social
4
0
Fork 1
Code Issues Releases Wiki Activity

fix local file include vulnerability in doc.php

Browse Source 
Conflicts:

	actions/doc.php
This commit is contained in:
Evan Prodromou 2010-02-01 11:10:36 -05:00
parent 779204b194
commit d264db6119
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
actions/doc.php
View File

@ -54,6 +54,9 @@ class DocAction extends Action
parent::prepare($args); parent::prepare($args);
$this->title = $this->trimmed('title'); $this->title = $this->trimmed('title');
if (!preg_match('/^[a-zA-Z0-9_-]*$/', $this->title)) {
$this->title = 'help';
}
$this->output = null; $this->output = null;
$this->loadDoc(); $this->loadDoc();