mark insecure

This commit is contained in:
Fumitoshi UKAI
2001-12-21 19:20:45 +00:00
parent 54702c4d83
commit cb2de722d8

View File

@@ -34,7 +34,7 @@ $query = $ENV{'QUERY_STRING'};
$cmd = ''; $cmd = '';
$cgi = 0; $cgi = 0;
if ($query eq '') { if ($query eq '') {
$_ = `pwd`; $_ = `pwd`; # insecure?
chop; chop;
s/\r$//; s/\r$//;
$dir = $_; $dir = $_;
@@ -54,7 +54,7 @@ if ($query eq '') {
$dir = $query; $dir = $query;
if (($dir !~ m@^/@) && if (($dir !~ m@^/@) &&
($WIN32 && $dir !~ /^[a-z]:/i)) { ($WIN32 && $dir !~ /^[a-z]:/i)) {
$_ = `pwd`; $_ = `pwd`; # insecure?
chop; chop;
s/\r$//; s/\r$//;
$dir = "$_/$dir"; $dir = "$_/$dir";