Skip to content

Commit

Permalink
reject .. in name.
Browse files Browse the repository at this point in the history
  • Loading branch information
kmuto committed Sep 2, 2018
1 parent 0df1b86 commit f4735ad
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion lib/review/init.rb
Original file line number Diff line number Diff line change
Expand Up @@ -243,7 +243,7 @@ def extract_archive(dir, filename, originalfilename)
next
end

if fname =~ %r{\A/} || fname =~ %r{/\.\./} # simple fool proof
if fname =~ %r{\A/} || fname =~ /\.\./ # simple fool proof
made = nil
break
end
Expand Down

0 comments on commit f4735ad

Please sign in to comment.