Index: /FCKeditor.Java/branches/2.4.x/src/changes/changes.xml
===================================================================
--- /FCKeditor.Java/branches/2.4.x/src/changes/changes.xml	(revision 3833)
+++ /FCKeditor.Java/branches/2.4.x/src/changes/changes.xml	(revision 3834)
@@ -6,6 +6,7 @@
 	
 	<body>
-		<release version="2.4-SNAPSHOT" date="in SVN" description="Minor bugfixes and enhancements.">
-			<action dev="mosipov" type="fix" issue="2608">Removing carriage return invalidate Javascript</action>
+		<release version="2.4.2" date="2009-07-10" description="Security and bugfixes.">
+			<action dev="mosipov" type="fix" issue="3902">Unsanitized request parameters may cause the request loop endlessly</action>
+			<action dev="mosipov" type="fix" issue="2608">Removing carriage return invalidates JavaScript</action>
 		</release>
 		<release version="2.4.1" date="2008-10-15"
Index: /FCKeditor.Java/trunk/build.xml
===================================================================
--- /FCKeditor.Java/trunk/build.xml	(revision 3833)
+++ /FCKeditor.Java/trunk/build.xml	(revision 3834)
@@ -44,4 +44,8 @@
 	</target>
 
+	<target name="clean-deployment" description="Cleans local deployment path">
+        <delete dir="/home/mosipov/public_html" />
+    </target>
+	
 	<!-- Do NOT remove this target. This is for link rewrite testing purposes -->
 	<!--
Index: /FCKeditor.Java/trunk/java-core/src/main/java/net/fckeditor/tool/UtilsFile.java
===================================================================
--- /FCKeditor.Java/trunk/java-core/src/main/java/net/fckeditor/tool/UtilsFile.java	(revision 3833)
+++ /FCKeditor.Java/trunk/java-core/src/main/java/net/fckeditor/tool/UtilsFile.java	(revision 3834)
@@ -113,4 +113,7 @@
 				.normalize(path))))
 			return false;
+		
+		if (!path.equals(sanitizeFolderName(path)))
+    		return false;
 
 		return true;
Index: /FCKeditor.Java/trunk/src/changes/changes.xml
===================================================================
--- /FCKeditor.Java/trunk/src/changes/changes.xml	(revision 3833)
+++ /FCKeditor.Java/trunk/src/changes/changes.xml	(revision 3834)
@@ -32,5 +32,4 @@
 			<action dev="mosipov" type="add" issue="2743">Add getUserFilesAbsolutePath to UserPathBuilder interface</action>
 			<action dev="mosipov" type="remove" issue="2618">Extract ImageInfo from java-core.jar</action>
-			<action dev="mosipov" type="fix" issue="2608">Removing carriage return invalidate Javascript</action>
 			<action dev="mosipov" type="update" issue="2605">Move escapeXml method to a StringBuffer</action>
 			<action dev="mosipov" type="add" issue="2592">Add more logging statements</action>
@@ -42,4 +41,8 @@
 			<action dev="mosipov" type="add" issue="2361">Provide interface for locale resolution</action>
 			<action dev="th-schwarz" type="add" issue="28">Implement Interface for File Browser Connector and Quick Uploader</action>
+		</release>
+		<release version="2.4.2" date="2009-07-10" description="Security and bugfixes.">
+			<action dev="mosipov" type="fix" issue="3902">Unsanitized request parameters may cause the request loop endlessly</action>
+			<action dev="mosipov" type="fix" issue="2608">Removing carriage return invalidates JavaScript</action>
 		</release>
 		<release version="2.4.1" date="2008-10-13"
