mark insecure
This commit is contained in:
@@ -34,7 +34,7 @@ $query = $ENV{'QUERY_STRING'};
|
|||||||
$cmd = '';
|
$cmd = '';
|
||||||
$cgi = 0;
|
$cgi = 0;
|
||||||
if ($query eq '') {
|
if ($query eq '') {
|
||||||
$_ = `pwd`;
|
$_ = `pwd`; # insecure?
|
||||||
chop;
|
chop;
|
||||||
s/\r$//;
|
s/\r$//;
|
||||||
$dir = $_;
|
$dir = $_;
|
||||||
@@ -54,7 +54,7 @@ if ($query eq '') {
|
|||||||
$dir = $query;
|
$dir = $query;
|
||||||
if (($dir !~ m@^/@) &&
|
if (($dir !~ m@^/@) &&
|
||||||
($WIN32 && $dir !~ /^[a-z]:/i)) {
|
($WIN32 && $dir !~ /^[a-z]:/i)) {
|
||||||
$_ = `pwd`;
|
$_ = `pwd`; # insecure?
|
||||||
chop;
|
chop;
|
||||||
s/\r$//;
|
s/\r$//;
|
||||||
$dir = "$_/$dir";
|
$dir = "$_/$dir";
|
||||||
|
Reference in New Issue
Block a user