summaryrefslogtreecommitdiff
path: root/lib/cgi
diff options
context:
space:
mode:
Diffstat (limited to 'lib/cgi')
-rw-r--r--lib/cgi/session.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/cgi/session.rb b/lib/cgi/session.rb
index 0bc10d013f..a5afb7e3e1 100644
--- a/lib/cgi/session.rb
+++ b/lib/cgi/session.rb
@@ -364,7 +364,7 @@ class CGI
unless check_id(id)
raise ArgumentError, "session_id `%s' is invalid" % id
end
- @path = dir+"/"+prefix+id
+ @path = dir+"/"+prefix+id.dup.untaint
unless File::exist? @path
@hash = {}
end