oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Block files with dangerous names from coming in via Storage untar.

Browse source
This commit is contained in:
Colin Kuskie 2010-08-11 15:46:02 -07:00
parent 9f724a7193
commit 13a222f6ce
3 changed files with 20 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
docs/changelog/7.x.x.txt
View file

@ -4,6 +4,7 @@
- fixed possible vulnerability loading template parser
- fixed possible vulnerability loading help files
- fixed possible vulnerability with filenames in storage locations
- fixed possible vulnerability with extracting tar files in storage locations
7.9.11
- fixed #11755: New cart does not update shipping methods correctly