Fixed a path transversal problem.

2026-04-08 20:07:06 -04:00
parent 9f1781b524
commit f9cae511af
1 changed files with 1 additions and 0 deletions
--- a/cloudvista.cgi
+++ b/cloudvista.cgi
@@ -112,6 +112,7 @@ sub safe_name {
    my $n = basename(shift || '');
    $n =~ s/[^\w.\-]/_/g;
    $n =~ s/^\./dot_/;
+    $n =~ s!/!_!g;
    return length($n) ? $n : 'file';
 }