diff options
author | Andrew Dolgov <[email protected]> | 2020-09-14 19:46:52 +0300 |
---|---|---|
committer | Andrew Dolgov <[email protected]> | 2020-09-14 19:46:52 +0300 |
commit | c3d14e1fa54c7dade7b1b7955575e2991396d7ef (patch) | |
tree | adf8415ace77f14bf8042cb518d0c78fecc5baef /classes/rpc.php | |
parent | 5b17fdc36281dd11e4ba0830f368a29aaba134da (diff) |
- fix multiple vulnerabilities in af_proxy_http
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized
- fetch_file_contents: validate all URLs before requesting them
- validate URLs: explicitly whitelist http and https scheme, forbid everything else
- DiskCache/cached_url: only serve whitelisted content types (images, video)
- simplify filename/URL handling code, remove and consolidate some less-used functions
Diffstat (limited to 'classes/rpc.php')
-rwxr-xr-x | classes/rpc.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/classes/rpc.php b/classes/rpc.php index 208551075..7f809f29b 100755 --- a/classes/rpc.php +++ b/classes/rpc.php @@ -572,7 +572,7 @@ class RPC extends Handler_Protected { function log() { $msg = clean($_REQUEST['msg']); - $file = clean_filename($_REQUEST['file']); + $file = basename(clean($_REQUEST['file'])); $line = (int) clean($_REQUEST['line']); $context = clean($_REQUEST['context']); |