diff options
| author | shyouhei <shyouhei@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-03-03 14:37:52 +0000 |
|---|---|---|
| committer | shyouhei <shyouhei@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2008-03-03 14:37:52 +0000 |
| commit | 76efd3551c856a6b359282ae5e02b18295d6cf97 (patch) | |
| tree | 3c18da8f760e1018212fbb8687cf45883280c78f /file.c | |
| parent | e7daebf21af1fa6002f86527b0e8d6a0f9dcd67c (diff) | |
merge revision(s) 15677:
* lib/webrick/httpservlet/filehandler.rb: should normalize path
separators in path_info to prevent directory traversal attacks
on DOSISH platforms.
reported by Digital Security Research Group [DSECRG-08-026].
* lib/webrick/httpservlet/filehandler.rb: pathnames which have
not to be published should be checked case-insensitively.
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8_5@15680 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'file.c')
0 files changed, 0 insertions, 0 deletions