Changeset 3836

Timestamp:

07/08/09 21:26:00 (4 years ago)

Author:

mosipov

Message:

REOPENED - #3902: Unsanitized request parameters may cause the request loop endlessly

File:

• FCKeditor.Java/branches/2.4.x/java-core/src/main/java/net/fckeditor/tool/UtilsFile.java (modified) (1 diff)

FCKeditor.Java/branches/2.4.x/java-core/src/main/java/net/fckeditor/tool/UtilsFile.java

@@ -113 +113 @@
                 return false;
         
-        if (!path.equals(sanitizeFolderName(path)))
+        if (!path.equals(path.replaceAll("\\.|\\||:|\\?|\\*|\"|<|>|\\p{Cntrl}", "_")))
                 return false;