diff options
| author | Tim Graham <timograham@gmail.com> | 2013-08-27 18:50:11 -0400 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2013-09-10 21:05:03 -0400 |
| commit | 988b61c550d798f9a66d17ee0511fb7a9a7f33ca (patch) | |
| tree | 5f363dd09562e54f7fb2909149035fb9bd3b03fe /scripts | |
| parent | 693ebff1a4f5eeda56279188ee473be6a1088e46 (diff) | |
[1.5.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative paths.
Thanks Rainer Koirikivi for the report and draft patch.
This is a security fix; disclosure to follow shortly.
Backport of 7fe5b656c9 from master
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions