Mirrors/sysPass
2
0
Fork 0
mirror of https://github.com/nuxsmin/sysPass.git synced 2026-03-13 11:57:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

* [FIX] Critical bugfix that prevents directory traversal in JS/CSS includes. Thanks to Jan Van for the notice

Browse Source
This commit is contained in:
nuxsmin
2016-12-24 19:43:28 +01:00
committed by Rubén Domínguez
parent 8b0e49b283
commit c455bc907d
4 changed files with 44 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
css/css.php
View File

@@ -52,7 +52,7 @@ if (!$file) {
$Minify = new Minify();
$Minify->setType(Minify::FILETYPE_CSS)
->setBase(Init::$SERVERROOT . urldecode($base))
->setBase(urldecode($base), true)
->addFile(urldecode($file))
->getMinified();
}