lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FIX #yogosha4433

Browse Source
This commit is contained in:
Laurent Destailleur 2020-09-16 16:34:19 +02:00
parent dec73da206
commit 1fd633ed21
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/document.php
View File

@ -219,7 +219,7 @@ if (!$accessallowed)
if (preg_match('/\.\./', $fullpath_original_file) || preg_match('/[<>|]/', $fullpath_original_file)) if (preg_match('/\.\./', $fullpath_original_file) || preg_match('/[<>|]/', $fullpath_original_file))
{ {
dol_syslog("Refused to deliver file ".$fullpath_original_file); dol_syslog("Refused to deliver file ".$fullpath_original_file);
print "ErrorFileNameInvalid: ".$original_file; print "ErrorFileNameInvalid: ".dol_escape_htmltag($original_file);
exit; exit;
} }

2
htdocs/viewimage.php
View File

@ -236,7 +236,7 @@ if (!$accessallowed)
if (preg_match('/\.\./', $fullpath_original_file) || preg_match('/[<>|]/', $fullpath_original_file)) if (preg_match('/\.\./', $fullpath_original_file) || preg_match('/[<>|]/', $fullpath_original_file))
{ {
dol_syslog("Refused to deliver file ".$fullpath_original_file); dol_syslog("Refused to deliver file ".$fullpath_original_file);
print "ErrorFileNameInvalid: ".$original_file; print "ErrorFileNameInvalid: ".dol_escape_htmltag($original_file);
exit; exit;
} }