d154726bc1
Yet again, fix a security hole in the Include macro. If the path used a symlink then it would bypass one of the three security checks. |
||
|---|---|---|
| .. | ||
| _macro.skeleton | ||
| a_account.pm | ||
| AdminBar.pm | ||
| AdminText.pm | ||
| AdminToggle.pm | ||
| AdSpace.pm | ||
| AOIHits.pm | ||
| AOIRank.pm | ||
| AssetProxy.pm | ||
| At_username.pm | ||
| c_companyName.pm | ||
| CanEditText.pm | ||
| D_date.pm | ||
| e_companyEmail.pm | ||
| EditableToggle.pm | ||
| Env.pm | ||
| Execute.pm | ||
| Extras.pm | ||
| FetchMimeType.pm | ||
| FileUrl.pm | ||
| FormParam.pm | ||
| GroupAdd.pm | ||
| GroupDelete.pm | ||
| GroupText.pm | ||
| H_homeLink.pm | ||
| Hash_userId.pm | ||
| Include.pm | ||
| International.pm | ||
| L_loginBox.pm | ||
| LastModified.pm | ||
| LoginToggle.pm | ||
| Page.pm | ||
| PageTitle.pm | ||
| PageUrl.pm | ||
| Product.pm | ||
| Quote.pm | ||
| r_printable.pm | ||
| RandomAssetProxy.pm | ||
| RandomThread.pm | ||
| RootTitle.pm | ||
| Slash_gatewayUrl.pm | ||
| Spacer.pm | ||
| Splat_random.pm | ||
| SQL.pm | ||
| SubscriptionItem.pm | ||
| SubscriptionItemPurchaseUrl.pm | ||
| Thumbnail.pm | ||
| u_companyUrl.pm | ||
| URLEncode.pm | ||
| User.pm | ||