5b65591d84
We should not allow directory traversals using "../" here. To test access the following URL once with and then without this patch: http://localhost/server/index.php/apps/files/?dir=../../This+Should+Not+Be+Here |
||
---|---|---|
.. | ||
BackgroundJob | ||
Command | ||
Controller | ||
js | ||
Service | ||
ActivityTest.php | ||
HelperTest.php |